@relation 'KDDTrain-20Percent' @attribute 'duration' real @attribute 'protocol_type' {'tcp','udp', 'icmp'} @attribute 'service' {'aol', 'auth', 'bgp', 'courier', 'csnet_ns', 'ctf', 'daytime', 'discard', 'domain', 'domain_u', 'echo', 'eco_i', 'ecr_i', 'efs', 'exec', 'finger', 'ftp', 'ftp_data', 'gopher', 'harvest', 'hostnames', 'http', 'http_2784', 'http_443', 'http_8001', 'imap4', 'IRC', 'iso_tsap', 'klogin', 'kshell', 'ldap', 'link', 'login', 'mtp', 'name', 'netbios_dgm', 'netbios_ns', 'netbios_ssn', 'netstat', 'nnsp', 'nntp', 'ntp_u', 'other', 'pm_dump', 'pop_2', 'pop_3', 'printer', 'private', 'red_i', 'remote_job', 'rje', 'shell', 'smtp', 'sql_net', 'ssh', 'sunrpc', 'supdup', 'systat', 'telnet', 'tftp_u', 'tim_i', 'time', 'urh_i', 'urp_i', 'uucp', 'uucp_path', 'vmnet', 'whois', 'X11', 'Z39_50'} @attribute 'flag' { 'OTH', 'REJ', 'RSTO', 'RSTOS0', 'RSTR', 'S0', 'S1', 'S2', 'S3', 'SF', 'SH' } @attribute 'src_bytes' real @attribute 'dst_bytes' real @attribute 'land' {'0', '1'} @attribute 'wrong_fragment' real @attribute 'urgent' real @attribute 'hot' real @attribute 'num_failed_logins' real @attribute 'logged_in' {'0', '1'} @attribute 'num_compromised' real @attribute 'root_shell' real @attribute 'su_attempted' real @attribute 'num_root' real @attribute 'num_file_creations' real @attribute 'num_shells' real @attribute 'num_access_files' real @attribute 'num_outbound_cmds' real @attribute 'is_host_login' {'0', '1'} @attribute 'is_guest_login' {'0', '1'} @attribute 'count' real @attribute 'srv_count' real @attribute 'serror_rate' real @attribute 'srv_serror_rate' real @attribute 'rerror_rate' real @attribute 'srv_rerror_rate' real @attribute 'same_srv_rate' real @attribute 'diff_srv_rate' real @attribute 'srv_diff_host_rate' real @attribute 'dst_host_count' real @attribute 'dst_host_srv_count' real @attribute 'dst_host_same_srv_rate' real @attribute 'dst_host_diff_srv_rate' real @attribute 'dst_host_same_src_port_rate' real @attribute 'dst_host_srv_diff_host_rate' real @attribute 'dst_host_serror_rate' real @attribute 'dst_host_srv_serror_rate' real @attribute 'dst_host_rerror_rate' real @attribute 'dst_host_srv_rerror_rate' real @attribute 'class' {'normal', 'anomaly'} @data 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,25,0.17,0.03,0.17,0.00,0.00,0.00,0.05,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,1,0.00,0.00,0.00,0.00,0.08,0.15,0.00,255,1,0.00,0.60,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,26,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,8153,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.04,0.03,0.01,0.00,0.01,normal 0,tcp,http,SF,199,420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,19,0.00,0.00,1.00,1.00,0.16,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,16,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,12,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,287,2251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,8,219,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,20,1.00,0.00,1.00,0.20,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,16,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,13788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.11,0.00,0.00,1.00,0.00,0.22,91,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,16,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,233,616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.03,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,343,1178,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,157,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,23,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,238,17,0.07,0.06,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,11905,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,87,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 5607,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 507,tcp,telnet,SF,437,14421,0,0,0,0,0,1,3,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,25,0.10,0.05,0.00,0.00,0.53,0.00,0.02,0.16,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,6588,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,43,255,1.00,0.00,0.02,0.14,0.00,0.00,0.56,0.57,normal 0,tcp,http,SF,215,10499,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,1400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.03,0.03,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,53,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,16,1.00,1.00,0.00,0.00,0.28,0.07,0.00,255,59,0.23,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,555,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.31,0.28,0.00,0.00,0.00,0.29,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,181,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,5,0.12,0.05,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,202,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,2302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,28,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,11,1.00,1.00,0.00,0.00,0.22,0.08,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1591,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,181,147,0.81,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 9052,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.66,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,3006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,11,1.00,1.00,0.00,0.00,0.10,0.08,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,80,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,80,0.31,0.02,0.31,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,255,861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,44,44,0.02,0.02,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,38,1.00,0.00,1.00,0.18,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,4,0.00,0.00,1.00,1.00,0.07,0.10,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.02,0.01,0.00,0.00,0.00,0.77,0.00,anomaly 0,tcp,http,SF,220,1398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,42,0.00,0.00,0.00,0.00,1.00,0.00,0.05,26,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,120,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,75,0.00,0.00,0.00,0.00,1.00,0.00,0.03,122,212,0.88,0.02,0.88,0.01,0.00,0.00,0.08,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,46,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,12,1.00,1.00,0.00,0.00,0.50,0.08,0.00,255,59,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,228,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,48,0.25,0.02,0.25,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,4,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,1,0.10,0.00,0.89,1.00,0.01,1.00,0.00,255,1,0.00,0.84,0.00,0.00,0.07,0.00,0.62,1.00,anomaly 0,tcp,http,SF,310,2794,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,10,0.00,0.00,1.00,1.00,0.16,0.08,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,696,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,133,0.39,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,236,1,0.00,0.58,0.58,0.00,0.00,0.00,0.58,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,19,1.00,1.00,0.00,0.00,0.37,0.08,0.00,255,67,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,7,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,21,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,2878,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,58,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,31,0.12,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,93,0.36,0.01,0.46,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,84,83,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,47,0.55,0.07,0.55,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,2790,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,48,255,1.00,0.00,0.02,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,5683,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,329,3982,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,31,0.00,0.00,0.00,0.00,1.00,0.00,0.10,24,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,7,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,19,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,95,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,320,379,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,72,7,0.10,0.11,0.01,0.00,0.97,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,3762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,15,0.00,0.00,1.00,1.00,0.11,0.05,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 315,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,117,2,0.02,0.54,0.78,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,1416,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,255,1.00,0.00,0.01,0.09,0.00,0.00,0.46,0.61,normal 0,tcp,http,SF,353,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,189,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,18,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,10,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,3065,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,243,119,0.48,0.02,0.00,0.02,0.01,0.02,0.00,0.00,normal 0,udp,other,SF,102,102,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,1,0.14,0.29,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,259,750,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 1082,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.42,0.86,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,0,354,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,32,0.03,0.03,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,247,1.00,0.00,1.00,0.15,0.00,0.00,1.00,0.68,normal 0,tcp,http,SF,278,7227,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,82,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,182,0.71,0.29,0.71,0.00,0.09,0.00,0.20,0.00,anomaly 0,tcp,http,SF,313,761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,1212,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,242,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,9165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,2243,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,23,249,1.00,0.00,0.04,0.10,0.00,0.00,1.00,0.96,normal 0,tcp,http,SF,251,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2089,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,255,152,0.60,0.03,0.00,0.00,0.01,0.02,0.00,0.01,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.21,0.00,0.00,1.00,0.88,normal 0,tcp,http,SF,237,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,107,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 25950,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.69,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,17,0.00,0.00,1.00,1.00,0.15,0.05,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,974,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,325,2649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,20,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,19,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,19,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 240,tcp,http,SF,328,275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.10,1.00,0.00,0.20,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,9,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,10,0.03,0.03,0.01,0.20,0.01,0.00,0.01,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,178,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1079,334,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,167,0.57,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 26,tcp,ftp,SF,273,903,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,49,0.28,0.02,0.01,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,20,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,5,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,237,138,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,1357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.61,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,262,1011,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,94,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,263,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,13,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,261,8412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,8,0.00,0.00,1.00,1.00,0.06,0.08,0.00,255,8,0.03,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,294,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,981,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,50,82,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,10352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,16096,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,129,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,26,1.00,0.00,1.00,0.19,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,4,1.00,1.00,0.00,0.00,0.31,0.31,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,13,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,277,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,92,0.83,0.33,0.83,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,19,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,15,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,8437,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,185,119,0.50,0.38,0.50,0.02,0.00,0.00,0.37,0.01,normal 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,302,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1766,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,6,0.02,0.02,0.02,0.00,0.00,0.00,0.83,0.00,normal 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9015,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 7,tcp,finger,SF,8,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,6,0.03,0.03,0.01,0.33,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,266,529,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.67,94,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,99,68,0.32,0.06,0.32,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,69,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,12,1.00,1.00,0.00,0.00,0.27,0.11,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,6834,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.57,18,19,1.00,0.00,0.06,0.11,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,212,0.83,0.02,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,19,0.99,1.00,0.00,0.00,0.16,0.07,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,118,195,1.00,0.00,0.01,0.02,0.00,0.00,0.74,0.84,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,486,1,0.08,0.00,0.89,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,6,0.00,0.00,0.00,0.00,0.27,0.09,0.00,255,6,0.02,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,247,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2078,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,89,117,0.31,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,19,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,5,0.02,0.04,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,661,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,69,0.36,0.02,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,34,0.00,0.00,0.03,0.00,0.97,0.06,0.00,255,34,0.13,0.02,0.13,0.00,0.00,0.00,0.67,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,2,1.00,1.00,0.00,0.00,0.07,0.14,0.00,255,42,0.16,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,18,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,5,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1075,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,100,0.39,0.17,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,656,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,172,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 15159,tcp,ftp,SF,350,1185,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,142,0.56,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,233,2470,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,1938,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,44,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,271,4781,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,11,28,1.00,0.00,0.09,0.25,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,14416,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,50,0.19,0.02,0.19,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,11564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,41,52,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,406,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,225,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,176,426,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,855,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,20,0.08,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,944,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,166,0.63,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,954,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,28,104,0.71,0.11,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,166,34660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,4,5,0.00,0.00,0.00,0.20,1.00,0.00,0.40,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,1,0.05,0.00,0.94,1.00,0.01,1.00,0.00,255,1,0.00,0.80,0.00,0.00,0.03,0.00,0.61,1.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,2,38,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,8549,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,285,6008,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,226,1411,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,37,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,256,12984,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,3740,449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,193,185,0.68,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.10,0.09,0.00,0.00,1.00,0.00,0.18,39,255,1.00,0.00,0.03,0.04,0.03,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,ftp_data,SF,832,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,28,1.00,0.00,1.00,0.18,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,25,1.00,0.00,1.00,0.56,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,201,169,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.04,0.03,0.00,0.00,0.00,normal 0,tcp,http,SF,285,304,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,101,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,24,1.00,1.00,0.00,0.00,0.19,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7422,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,44,0.17,0.02,0.17,0.00,0.00,0.00,0.72,0.00,normal 0,tcp,http,SF,198,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 20,tcp,smtp,SF,2310,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,157,0.62,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,65,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,2,0.00,0.00,0.00,0.00,0.22,0.22,0.00,255,16,0.06,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,71,0.28,0.01,0.28,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,173,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,3,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,9,142,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,12,0.05,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,283,912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,1789,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,10,0.50,0.10,0.00,0.10,1.00,0.00,0.40,73,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,123,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,2,1.00,1.00,0.00,0.00,0.07,0.13,0.00,255,52,0.20,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,187,0.88,0.02,0.00,0.00,0.00,0.01,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,9,1.00,1.00,0.00,0.00,0.06,0.09,0.00,255,9,0.04,0.10,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,60,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,301,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,355,870,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,63,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 18,tcp,telnet,SF,106,1468,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,117,1,0.01,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,1423,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 9235,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,sql_net,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,46,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,46,0.18,0.02,0.18,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,168,9551,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,230,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,864,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.38,0.36,0.00,0.00,0.00,0.37,1.00,anomaly 0,tcp,http,SF,291,10369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,22,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,749,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,129,0.74,0.11,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,6924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,255,1.00,0.00,0.00,0.01,0.00,0.00,0.01,0.01,normal 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,167,709,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.25,1.00,0.00,0.75,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,851,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,127,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,3360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,729,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,156,0.41,0.04,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,111,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.24,0.00,0.00,1.00,0.91,normal 0,udp,domain_u,SF,46,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,225,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,2719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,771,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 409,tcp,telnet,SF,279,9598,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,113,0.45,0.01,0.00,0.00,0.80,0.88,0.00,0.00,normal 0,tcp,http,SF,226,651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,447,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,44,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,6,1.00,1.00,0.00,0.00,0.43,0.29,0.00,94,26,0.28,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,88,0.36,0.27,0.36,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,281,1951,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,77,255,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,25,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,9,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,263,453,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 36613,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,212,43,0.20,0.02,0.00,0.00,0.00,0.00,0.06,0.12,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,30,0.12,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,1980,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,161,5530,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,211,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,1701,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,112,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.67,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,16,1.00,1.00,0.00,0.00,0.22,0.05,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,38,0.25,0.09,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,16,0.97,1.00,0.03,0.00,0.24,0.09,0.00,255,52,0.20,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5043,tcp,ftp_data,SF,5131424,0,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.14,0.00,0.00,1.00,0.00,0.29,7,42,1.00,0.00,1.00,0.14,0.00,0.02,0.00,0.00,anomaly 0,tcp,http,SF,320,420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,61,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,160,101,0.40,0.05,0.01,0.02,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,204,1229,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.16,0.15,0.00,0.00,0.00,0.15,1.00,anomaly 0,tcp,ftp_data,SF,10389,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,81,0.32,0.02,0.31,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,344,573,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,60,0.04,0.03,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,821,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,107,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,213,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,11,1.00,0.00,1.00,0.55,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,1,0.17,0.00,0.83,1.00,0.03,1.00,0.00,255,1,0.00,0.47,0.00,0.00,0.02,0.00,0.13,1.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,239,0.94,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1080,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,202,154,0.58,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,7,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,657,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,11,0.04,0.60,0.00,0.00,0.00,0.09,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,284,765,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,261,15455,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,36,0.14,0.03,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.60,0.56,0.00,0.01,0.00,0.57,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.64,0.64,0.00,0.00,0.00,0.64,1.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,197,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,234,0.92,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,584,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,9,0.00,0.00,0.00,0.00,1.00,0.00,0.56,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,9,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,2844,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,978,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,128,164,0.75,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,5670,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,13,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,10,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,6,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,214,9986,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,23,0.55,0.05,0.55,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,17,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,8,0.00,0.00,0.00,0.00,0.40,0.10,0.00,255,16,0.06,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,38,1.00,0.00,0.12,0.18,0.00,0.00,1.00,1.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,37,2,0.03,1.00,0.03,1.00,0.00,0.00,0.86,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.53,0.51,0.00,0.00,0.00,0.51,1.00,anomaly 0,tcp,http,SF,294,3327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,57,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,1249,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,425,1,0.08,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,http,SF,196,3282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,30,1.00,0.43,0.00,0.00,0.05,0.06,0.10,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,4482,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,58,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,319,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,2,0.33,0.50,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1087,302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,64,0.24,0.29,0.00,0.03,0.00,0.00,0.26,0.00,normal 0,tcp,http,SF,210,3754,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,255,1.00,0.00,0.02,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.15,0.00,0.00,1.00,0.79,normal 0,tcp,http,SF,234,6282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,251,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,http,SF,237,1461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,10,1.00,1.00,0.00,0.00,0.24,0.10,0.00,124,62,0.24,0.03,0.01,0.03,0.98,0.48,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,250,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,657,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,28,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,5921,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,12,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,426,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,247,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,7902,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.88,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,67,171,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,3,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,188,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,55,1.00,0.00,0.17,0.24,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,12,1.00,1.00,0.00,0.00,0.33,0.14,0.00,255,12,0.05,0.10,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,1956,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,12,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,8,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,139,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,347,8113,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,normal 1,tcp,smtp,SF,570,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,104,0.44,0.05,0.01,0.02,0.01,0.01,0.01,0.00,normal 0,tcp,http,SF,219,17540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,1,0.00,0.53,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,120,8,0.07,0.08,0.01,0.00,0.98,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 31401,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,11,1.00,1.00,0.00,0.00,0.19,0.11,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,200,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,25,1.00,0.00,0.04,0.00,0.08,0.08,0.04,0.04,normal 0,tcp,http,SF,233,581,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,276,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,24,0.17,0.08,0.17,0.08,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,41,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 7805,tcp,telnet,SF,1828,148722,0,0,0,1,2,1,19,0,1,10,8,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,7,0.14,0.08,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,764,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,12,0.00,0.00,0.00,0.00,1.00,0.00,0.33,23,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,1.00,1.00,0.00,0.00,1.00,0.00,0.00,135,75,0.56,0.01,0.01,0.00,0.99,0.97,0.00,0.00,anomaly 0,tcp,http,SF,216,5284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,255,1.00,0.00,0.01,0.02,0.00,0.00,0.44,0.29,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,234,997,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,1643,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,25,0.00,0.04,0.00,0.00,1.00,0.00,0.08,25,255,1.00,0.00,0.04,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,226,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.08,0.02,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,2881,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,14,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,1,0.00,0.00,0.00,0.00,0.08,0.17,0.00,255,24,0.09,0.20,0.60,0.00,0.00,0.00,0.34,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,21,0.08,0.02,0.08,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,279,494,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,486,486,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,115,0.45,0.01,0.45,0.00,0.00,0.00,0.00,0.00,normal 7,tcp,telnet,SF,105,1401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,1,0.01,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,27,2,0.04,1.00,0.04,1.00,0.00,0.00,0.89,1.00,anomaly 10,tcp,smtp,SF,1330,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,142,0.56,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,457,457,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,153,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,4,1.00,1.00,0.00,0.00,0.09,0.09,0.00,255,64,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,121,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,271,3582,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,179,1668,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,852,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,219,39,0.13,0.02,0.13,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,170,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,4137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,10,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,230,6880,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.29,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,6,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,857,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,132,0.57,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,1707,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,200,0.78,0.01,0.78,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,68,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,68,0.27,0.02,0.27,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,6367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,215,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,229,217,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,18,1.00,1.00,0.00,0.00,0.16,0.04,0.00,255,18,0.07,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,16,1.00,1.00,0.00,0.00,0.46,0.11,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,13,0.00,0.00,1.00,1.00,0.17,0.08,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,336,15767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5784,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.53,0.82,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,1212,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.21,0.00,0.01,0.43,0.96,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,17,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,58,0.23,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,339,241,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,3245,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,79,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,986,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,169,0.89,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,4,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,37,0.15,0.01,0.16,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,405,23786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,21,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,785,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,70,0.76,0.12,0.02,0.03,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,258,4302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,34,1.00,0.00,0.03,0.06,0.00,0.06,0.00,0.03,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,35,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,318,2649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,1240,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,2,0.00,0.00,1.00,1.00,0.08,0.52,0.00,195,2,0.01,0.08,0.13,0.00,0.01,0.00,0.38,1.00,anomaly 0,tcp,http,SF,291,320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.05,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,224,546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,459,5,0.07,0.00,0.90,1.00,0.01,0.99,0.00,255,4,0.02,0.99,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 542,udp,domain_u,SF,17,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,29,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,143,0.92,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,1,0.00,0.00,0.00,0.00,0.08,0.25,0.00,255,3,0.01,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,72,72,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,19,192,1.00,0.00,0.05,0.19,0.00,0.00,1.00,0.99,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,75,65,0.63,0.04,0.63,0.05,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,212,828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,1475,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,13206,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,172,12793,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,84,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,205,0.80,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.54,0.90,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,ftp,SF,1238,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,123,0.48,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,59,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,167,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,0.99,1.00,anomaly 2,tcp,smtp,SF,1551,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,135,0.67,0.67,0.33,0.01,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,1308,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,14,1.00,0.00,0.50,0.14,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,356,1125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,364,6914,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,776,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,28,0.11,0.01,0.55,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,17,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,7546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,1841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,43,43,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,355,2109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,26,0.00,0.00,0.00,0.00,1.00,0.00,0.23,29,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,14,1.00,1.00,0.00,0.00,0.42,0.06,0.00,255,14,0.05,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,1260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,9,0.00,0.00,0.00,0.00,1.00,0.00,0.56,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,300,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 30,tcp,ftp,SF,1458,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,40,0.25,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10455,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.51,0.87,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.73,0.35,0.00,0.03,0.00,0.62,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10326,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,0.00,0.00,0.00,0.00,0.40,0.60,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,2,1.00,1.00,0.00,0.00,0.08,0.15,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,RSTO,13794,2966,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,170,96,0.43,0.42,0.01,0.02,0.00,0.00,0.41,0.04,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,20,1.00,1.00,0.00,0.00,0.27,0.05,0.00,255,58,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,911,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,18,161,0.83,0.17,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,9,1.00,0.78,0.00,0.00,1.00,0.00,0.33,29,141,0.24,0.07,0.03,0.01,0.93,0.05,0.00,0.00,anomaly 0,tcp,http,SF,280,3332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,20,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,41,41,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,166,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,10,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,5,0.04,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,255,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,281,1745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,1285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,264,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,15,1.00,1.00,0.00,0.00,0.44,0.06,0.00,255,15,0.06,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,17,1.00,0.00,1.00,0.24,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,28,1.00,0.00,1.00,0.54,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,215,9399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,79,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,3,1.00,1.00,0.00,0.00,0.19,0.25,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,43,255,1.00,0.00,0.02,0.07,0.00,0.00,1.00,0.97,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,151,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,151,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,19,1,0.05,1.00,0.05,0.00,0.00,0.00,0.84,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,10,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,0.33,0.67,0.40,101,98,0.97,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,676,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,187,0.73,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,455,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,115,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,18,1.00,1.00,0.00,0.00,0.21,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,1596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,139,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,192,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,225,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,13,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,256,4486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,icmp,eco_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,210,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,96,0.71,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,17,1.00,1.00,0.00,0.00,0.31,0.07,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,16,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,41,117,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,43,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,248,2313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,36,0.00,0.00,0.00,0.00,1.00,0.00,0.08,23,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,SF,1250,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,65,0.27,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,20,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,127,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 202,tcp,telnet,SF,209,1824,0,0,0,0,0,1,5,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,12,0.09,0.04,0.01,0.00,0.02,0.25,0.00,0.00,normal 0,tcp,other,SF,5891,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,1,0.00,0.00,0.00,0.00,0.08,0.31,0.00,83,1,0.01,0.08,0.23,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,276,1767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,29,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2304,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 41285,tcp,remote_job,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.28,0.56,0.00,0.00,0.00,0.56,1.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,18,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,114,44,0.15,0.04,0.15,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,13239,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,63,0.33,0.04,0.33,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,8,223,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,8,0.04,0.09,0.01,0.25,0.01,0.00,0.00,0.00,normal 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,22,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,255,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,9,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,16,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,10647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,14,1.00,0.00,0.09,0.14,0.00,0.14,0.00,0.07,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,33,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,355,657,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 13488,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,155,11,0.07,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,68,1.00,0.00,0.01,0.00,0.00,0.00,0.03,0.03,anomaly 0,tcp,http,SF,205,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,325,753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,232,193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.03,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,886,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,60,0.44,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,3432,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,6,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,62,2,0.02,1.00,0.02,1.00,0.00,0.00,0.92,1.00,anomaly 0,tcp,http,SF,147,12141,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1451,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,110,78,0.71,0.09,0.01,0.00,0.02,0.01,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,214,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,http,SF,235,1889,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 25,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.70,0.70,0.00,0.00,0.00,0.69,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,320,1,0.00,0.00,1.00,1.00,0.00,0.51,0.00,255,1,0.00,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,299,1540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,29,0.00,0.00,0.00,0.00,1.00,0.00,0.14,34,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,23,1.00,1.00,0.00,0.00,0.17,0.04,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,241,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,66,66,0.00,0.00,0.00,0.00,1.00,0.00,0.00,234,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,16,0.00,0.00,1.00,1.00,0.15,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 3047,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.69,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 1327,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.57,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,1923,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,21,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,37,29,0.24,0.14,0.24,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,345,2254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,278,6546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,196,16143,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,33,0.00,0.00,0.00,0.00,1.00,0.00,0.09,230,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,277,2253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,203,578,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,179,1,0.01,0.17,0.33,0.00,0.00,0.00,0.33,1.00,anomaly 860,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.64,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,15,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,6,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,4,1.00,1.00,0.00,0.00,0.06,0.08,0.00,212,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,367,5199,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,199,1,0.65,1.00,0.35,0.00,0.01,0.41,0.00,255,1,0.00,0.32,0.78,0.00,0.51,1.00,0.27,0.00,anomaly 0,tcp,http,SF,257,23051,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,53,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,105,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,128,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,68,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.01,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,523,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,22996,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,39,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,775,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,105,0.88,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 475,tcp,http,SF,314,266,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.08,1.00,0.00,0.17,255,239,0.94,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8,tcp,smtp,SF,525,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,67,178,0.99,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.21,0.00,0.78,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.22,0.00,0.77,1.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,8,0.00,0.00,0.00,0.00,0.27,0.10,0.00,255,8,0.03,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,213,37327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,190,8654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.05,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,88,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,88,0.35,0.02,0.35,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,17,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 27,tcp,ftp,SF,1067,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,70,0.28,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,126,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,253,0.00,0.00,0.00,0.00,1.00,0.01,0.00,143,110,0.77,0.01,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,2547,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,12,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,79,0.25,0.06,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,15,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,4,1.00,0.00,0.25,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,239,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,25,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.02,0.38,0.03,normal 2,tcp,smtp,SF,1258,359,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,192,0.72,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,1.00,1.00,0.00,0.00,1.00,0.00,0.00,133,73,0.55,0.02,0.01,0.00,0.98,0.97,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,3,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,90,1.00,0.00,1.00,0.24,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,42,65,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,104,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,3215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 5065,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.57,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,256,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,15,0.06,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,RSTO,125,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,4,1.00,0.00,0.25,0.00,0.25,0.25,0.75,0.75,anomaly 0,tcp,auth,SF,13,40,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,3,0.01,0.04,0.01,0.67,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,4759,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,19,0.07,0.01,0.35,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S1,278,7958,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,1.00,0.50,0.00,0.00,1.00,0.00,1.00,3,255,1.00,0.00,0.33,0.03,0.33,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.48,0.42,0.00,0.11,0.00,0.42,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,5193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,0.06,1,216,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.20,normal 0,tcp,http,SF,301,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,8,9,0.00,0.00,0.00,0.11,1.00,0.00,0.22,85,84,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,3295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,36,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,12471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,230,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1985,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.55,0.92,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,5,1.00,1.00,0.00,0.00,0.42,0.33,0.00,255,5,0.02,0.10,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,55,0.08,0.05,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,99,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,66,0.26,0.01,0.26,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,shell,SF,82,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,16,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,1,0.09,0.00,0.91,1.00,0.01,1.00,0.00,255,1,0.00,0.59,0.00,0.00,0.03,0.00,0.30,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,7,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,27,0.11,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,54,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,376,345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,37,0.15,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,22,1.00,0.00,1.00,0.14,0.00,0.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,29,0.11,0.01,0.54,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1053,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,177,0.69,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,196,0.77,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,119,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,147,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1539,395,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,147,0.67,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,5,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,358,1758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,282,1227,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,175,175,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,1509,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,76,0.67,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,358,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,2,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,20,0.00,0.00,1.00,1.00,0.08,0.05,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,329,303,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,33,0.00,0.00,0.00,0.00,1.00,0.00,0.06,59,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,788,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,29,0.64,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,4591,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,58,22,0.38,0.10,0.02,0.00,0.97,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,8,0.03,0.04,0.01,0.25,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,118,0.46,0.01,0.46,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,52,0.28,0.02,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,1022,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,23,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,2108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,15,0.00,0.00,0.00,0.00,1.00,0.00,0.27,60,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 8,tcp,smtp,SF,2544,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,189,0.65,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,67,0.26,0.04,0.26,0.00,0.16,0.00,0.02,0.00,anomaly 0,tcp,http,SF,327,6721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,158,1.00,0.00,0.33,0.13,0.00,0.00,1.00,1.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,18,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,118,1.00,0.00,0.01,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,66,1,0.02,0.32,0.27,0.00,0.09,0.00,0.27,1.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,15,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,27,0.11,0.02,0.11,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,183,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,5,1.00,1.00,0.00,0.00,0.20,0.08,0.00,27,51,0.19,0.11,0.07,0.04,0.93,0.10,0.00,0.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,7,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,763,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,96,0.41,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,307,8339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,236,7262,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,77,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,246,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,16,1.00,0.00,1.00,0.12,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,13038,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.05,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,254,390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,176,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 5753,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.51,0.86,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,16,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 17399,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,27,1.00,0.00,1.00,0.11,0.00,0.00,0.00,0.00,anomaly 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,2,0.00,0.00,1.00,1.00,0.03,0.54,0.00,235,2,0.01,0.15,0.28,0.00,0.01,0.00,0.49,1.00,anomaly 31,tcp,ftp,SF,1221,3380,0,0,0,24,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,41,0.16,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,299,291,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.02,0.00,0.02,0.00,0.00,normal 0,tcp,ftp_data,SF,1874,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,30,0.20,0.03,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1301,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,67,114,0.24,0.10,0.01,0.03,0.00,0.00,0.00,0.00,normal 21263,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.66,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,292,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,322,322,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,219,0.86,0.01,0.86,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,11,1.00,1.00,0.00,0.00,0.35,0.06,0.00,255,11,0.04,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,330,256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,193,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,7497,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,13,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,4,1.00,1.00,0.00,0.00,0.09,0.13,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,3,1.00,1.00,0.00,0.00,0.50,0.33,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,284,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,44,0.32,0.04,0.32,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1194,482,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,13,0.05,0.01,0.00,0.00,0.00,0.00,0.05,0.00,normal 0,tcp,other,SF,6601,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,1,0.05,0.00,0.00,0.00,0.05,0.38,0.00,173,1,0.01,0.06,0.32,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,21,0.48,0.07,0.48,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1452,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,115,78,0.68,0.03,0.01,0.00,0.01,0.01,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,28,0.17,0.03,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,17,0.00,0.00,1.00,1.00,0.15,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,366,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,7,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,748,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,51,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,1294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,11436,1383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,176,142,0.62,0.02,0.01,0.01,0.00,0.00,0.01,0.02,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,3,1.00,1.00,0.00,0.00,0.13,0.17,0.00,255,54,0.21,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,195,4768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,168,255,1.00,0.00,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,191,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,191,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,3491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1062,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,196,1337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,722,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,116,0.47,0.03,0.01,0.02,0.00,0.00,0.03,0.04,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.68,0.67,0.00,0.00,0.00,0.67,1.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,3477,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,2140,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,117,0.45,0.02,0.45,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,478,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,30,0.00,0.00,0.00,0.03,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,1,0.01,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.33,0.00,0.00,0.00,0.00,0.29,1.00,anomaly 0,tcp,http,SF,213,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,237,0.93,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,303,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,196,0.77,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 4931,udp,domain_u,SF,73,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,94,70,0.74,0.03,0.74,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,IRC,S1,197,2276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.50,1.00,0.00,0.00,0.50,1.00,0.00,24,9,0.38,0.08,0.04,0.00,0.12,0.33,0.17,0.44,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,53,1,0.02,0.15,0.09,0.00,0.11,0.00,0.09,1.00,anomaly 0,tcp,http,SF,242,6725,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,868,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,15,1.00,1.00,0.00,0.00,0.52,0.07,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2697,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,87,0.34,0.03,0.00,0.00,0.01,0.02,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,214,0.84,0.02,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,18,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,3042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,42,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,8,224,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,5,0.03,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,98,0.40,0.01,0.40,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,18,0.07,0.02,0.07,0.00,0.00,0.00,0.72,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,341,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,493,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,12,0.09,0.06,0.02,0.25,0.00,0.00,0.00,0.08,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,27,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,21,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1483,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,24,126,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,79,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,2426,2737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,0.55,98,78,0.33,0.05,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,21,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,2,1.00,1.00,0.00,0.00,0.22,0.33,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,170,13603,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.05,0.00,0.00,0.94,0.97,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,2,1.00,1.00,0.00,0.00,0.04,0.13,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,17,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,10,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,269,8921,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,255,1.00,0.00,0.01,0.03,0.00,0.01,0.01,0.03,normal 0,tcp,http,SF,315,347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,1,0.00,0.00,1.00,1.00,0.02,0.09,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,119,1,0.01,0.13,0.01,0.00,0.00,0.00,0.03,1.00,anomaly 0,tcp,http,SF,216,7384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.23,0.00,0.00,1.00,1.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,208,1,0.00,0.77,0.77,0.00,0.03,0.00,0.63,1.00,anomaly 0,tcp,http,SF,235,12623,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.04,0.00,0.00,0.46,0.06,normal 0,tcp,smtp,SF,667,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,122,104,0.43,0.05,0.01,0.02,0.01,0.01,0.01,0.00,normal 2,tcp,smtp,SF,1160,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,97,0.53,0.07,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,169,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1299,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,18,17,0.94,0.11,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,711,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,130,0.42,0.05,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,65,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,80,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 2,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,1,0.06,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,0.81,0.00,0.00,0.05,0.00,0.71,1.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,2,0.00,0.00,1.00,1.00,0.03,0.54,0.00,255,2,0.01,0.14,0.25,0.00,0.00,0.00,0.85,1.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.66,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,13,255,1.00,0.00,0.08,0.11,0.00,0.00,1.00,0.81,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,5834,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,1427,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.25,0.23,0.00,0.00,0.00,0.24,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,261,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,21,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,11,1.00,1.00,0.00,0.00,0.22,0.08,0.00,255,51,0.20,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,11,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,23,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,15,1.00,1.00,0.00,0.00,0.12,0.06,0.00,93,8,0.09,0.12,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,1035,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,34,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.32,0.32,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,153,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,252,2795,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,940,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,15,1.00,1.00,0.00,0.00,0.25,0.07,0.00,223,57,0.26,0.02,0.01,0.00,0.99,0.96,0.00,0.00,anomaly 0,tcp,http,SF,243,663,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,92,1.00,0.00,0.50,0.09,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,12,0.00,0.00,1.00,1.00,0.10,0.08,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,2408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,215,11680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,14,1.00,0.07,0.00,0.00,1.00,0.00,0.14,2,255,1.00,0.00,0.50,0.02,0.50,0.00,0.00,0.00,normal 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,3,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,19,0.50,1.00,0.50,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,27998,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,5745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,16,0.00,0.00,1.00,1.00,0.13,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,24,11,0.46,0.12,0.04,0.00,0.92,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2168,402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,16,0.06,0.02,0.00,0.00,0.93,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,373,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,42,75,0.33,0.10,0.33,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,347,1417,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,354,1875,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,247,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,2,1.00,1.00,0.00,0.00,0.07,0.14,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,11,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,16,0.00,0.00,1.00,1.00,0.14,0.07,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,1.00,1.00,0.00,0.00,1.00,0.00,0.00,78,24,0.23,0.05,0.01,0.08,1.00,0.75,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,2,0.00,0.00,0.00,0.00,0.25,0.25,0.00,255,242,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,51,57,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,887,436,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,109,0.43,0.04,0.00,0.00,0.14,0.00,0.02,0.00,normal 0,tcp,smtp,SF,695,328,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,130,0.51,0.02,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,434,434,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,30,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,495,0,0,0,0,0,0,1,0,0,0,5,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,30,1.00,0.00,1.00,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,15,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,118,9,0.08,0.08,0.01,0.00,0.98,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2760,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,154,1.00,0.00,1.00,0.01,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,154,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,756,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,53,0.71,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.17,1.00,0.82,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.20,1.00,0.80,0.00,anomaly 0,tcp,http,SF,218,6776,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,27,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,printer,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,5,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,22,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7196,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,55,0.33,0.05,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,307,306,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,225,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,24,0.30,0.05,0.30,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,121,0.00,0.00,0.00,0.00,1.00,0.00,0.02,233,171,0.73,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,202,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,282,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,206,12642,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.09,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,250,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.98,0.00,0.00,0.00,0.00,0.00,anomaly 9908,tcp,IRC,RSTR,2634,8611,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,11,4,0.36,0.18,0.09,0.00,0.00,0.00,0.36,1.00,normal 357,tcp,telnet,SF,334,10686,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.02,0.00,0.00,0.80,0.92,0.00,0.00,normal 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,49,0.28,0.03,0.28,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,520,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,43,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,6,0.02,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,214,155,0.72,0.01,0.00,0.00,0.00,0.00,0.72,1.00,normal 0,tcp,http,SF,281,759,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,113,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,345,3938,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,6,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,64,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,53,229,1.00,0.00,0.02,0.06,0.00,0.00,0.08,0.55,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,139,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,35,255,1.00,0.00,0.03,0.06,0.00,0.00,0.03,0.06,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1051,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 799,tcp,telnet,RSTR,676,23920,0,0,0,0,0,1,2,0,0,0,0,0,1,0,0,0,3,2,0.00,0.00,0.67,1.00,0.67,0.67,0.00,255,16,0.06,0.06,0.01,0.00,0.67,0.06,0.01,0.12,normal 0,tcp,http,SF,209,3556,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,7,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,934,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,148,0.00,0.00,0.00,0.00,1.00,0.00,0.00,148,148,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,344,1247,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,5,0.00,0.00,1.00,1.00,0.04,0.08,0.00,137,5,0.04,0.08,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,277,1224,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,325,3941,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1277,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,54,168,0.59,0.09,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,16,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,183,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,1.00,1.00,0.00,0.00,0.25,0.75,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,21,3,0.14,0.24,0.05,0.00,0.33,1.00,0.05,0.00,anomaly 0,udp,domain_u,SF,41,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,121,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,199,0.78,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.89,0.88,0.00,0.00,0.00,0.88,1.00,anomaly 0,tcp,http,SF,326,420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,134,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,134,0.53,0.01,0.53,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,432,1,0.05,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,54,1.00,0.00,1.00,0.13,0.00,0.02,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,73,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,3,0.79,0.67,0.21,0.33,0.04,0.38,0.00,255,3,0.01,0.11,0.28,0.00,0.22,0.67,0.06,0.33,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,9,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,6622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,81,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,319,583,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,28,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,304,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,194,190,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,9,317,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,8,0.02,0.07,0.02,0.38,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,356,1137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,165,255,1.00,0.00,0.01,0.03,0.00,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,17,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,212,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,29,0.11,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,299,12471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 35682,tcp,telnet,RSTOS0,381709090,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,78,2,0.03,0.12,0.08,0.00,0.00,0.00,0.08,0.50,anomaly 0,tcp,smtp,SF,6,123,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.38,0.00,0.12,1.00,0.00,115,166,0.51,0.10,0.01,0.01,0.00,0.01,0.03,0.00,anomaly 4,tcp,telnet,RSTO,0,15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,130,1,0.01,0.05,0.01,0.00,0.00,0.00,0.01,1.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,18,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,366,4084,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,18,4,0.22,0.28,0.06,0.00,0.06,0.00,0.22,1.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,72,0.30,0.09,0.30,0.03,0.00,0.00,0.00,0.00,normal 15435,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.84,1.00,0.00,0.00,0.00,0.00,0.00,normal 2414,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,18,0.00,0.00,1.00,1.00,0.17,0.08,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,17,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,37,0.15,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,16,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,15,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,11380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 10,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.48,0.47,0.00,0.00,0.00,0.47,1.00,anomaly 0,tcp,http,SF,188,13450,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,5,1.00,1.00,0.00,0.00,0.56,0.33,0.00,255,12,0.05,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,SF,1195,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,14,0.12,0.05,0.01,0.00,0.02,0.00,0.07,0.00,anomaly 0,tcp,smtp,SF,992,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,170,0.68,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,156,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,2597,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,59,163,0.56,0.22,0.02,0.01,0.02,0.00,0.00,0.05,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,25,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,1981,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,33,0.20,0.03,0.20,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,158,38643,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,62,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,16,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,682,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,253,255,1.00,0.00,0.00,0.01,0.00,0.00,0.14,0.15,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,68,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,10044,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,146,92,0.29,0.04,0.29,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,123,234,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,85,0.27,0.62,0.01,0.02,0.00,0.00,0.58,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,276,108545,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,36,2,0.03,1.00,0.03,1.00,0.00,0.00,0.86,1.00,anomaly 0,tcp,http,SF,319,4143,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,16574,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,106,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2838,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,130,0.51,0.05,0.00,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,463,12604,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,45,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,75,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 1,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,12,1.00,0.00,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,92,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,92,0.56,0.02,0.56,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.05,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,http,SF,294,3808,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 8486,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.70,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,31,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,20,1.00,0.00,1.00,0.10,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,29,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,197,193,0.98,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,18,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1131,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,180,0.67,0.33,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,2887,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1329,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,177,0.69,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,215,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,29,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,224,6874,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,1704,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,20,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTO,242,16819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.43,0.43,1.00,0.00,0.00,128,255,1.00,0.00,0.01,0.01,0.00,0.00,0.03,0.02,normal 0,tcp,http,SF,197,7204,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,167,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,126,0.49,0.02,0.49,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,SF,318,9696,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,8,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,2659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,198,246,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.02,0.65,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1492,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,244,165,0.63,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,4,1.00,1.00,0.00,0.00,0.15,0.15,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,12,1.00,1.00,0.00,0.00,0.33,0.11,0.00,255,72,0.28,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,153,115,0.35,0.05,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,303,6833,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,262,3819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,20,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,20,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,258,12037,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,83,0.84,0.02,0.84,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,246,1600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,36,0.00,0.00,0.00,0.00,1.00,0.00,0.14,138,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,201,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,114,0.45,0.02,0.45,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,2446,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,37,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,2107,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,60,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,11376,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.02,0.18,0.00,0.00,0.00,0.72,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,20,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,608,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,41,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,18,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,1,0.08,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.87,1.00,anomaly 0,tcp,http,SF,199,749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,158,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,2,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,79,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 37815,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,tim_i,SF,564,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,1,0.13,0.00,0.87,1.00,0.02,1.00,0.00,255,1,0.00,0.49,0.00,0.00,0.03,0.00,0.20,1.00,anomaly 0,tcp,http,SF,280,9544,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,169,255,1.00,0.00,0.01,0.03,0.00,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,186,15495,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,10,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,267,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,201,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.49,0.49,0.00,0.00,0.00,0.49,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,12,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,43,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,143,0.56,0.44,0.56,0.00,0.09,0.00,0.35,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,166,1.00,0.00,0.33,0.23,0.00,0.00,1.00,1.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,5,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,106,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,7,1.00,1.00,0.00,0.00,0.24,0.14,0.00,255,63,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,SF,14,41,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,9,0.09,0.09,0.02,0.22,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,75,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,22,0.19,0.06,0.19,0.00,0.02,0.00,0.54,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,113,0.44,0.01,0.56,0.00,0.00,0.00,0.00,0.00,normal 1,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,26,0.41,0.05,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,2,0.00,0.00,0.00,0.00,0.08,0.27,0.00,255,2,0.01,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,289,2488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,129,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,435,435,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 9114,tcp,IRC,RSTR,1121,7999,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,29,11,0.38,0.07,0.03,0.00,0.14,0.36,0.17,0.45,normal 0,tcp,http,SF,235,512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,59,60,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,1129,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,25,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,441,441,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,191,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 10,tcp,smtp,SF,664,333,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,207,1.00,0.00,0.20,0.01,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1770,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,152,248,0.97,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,210,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,276,2924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,remote_job,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,19,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,0.50,1.00,0.00,1.00,181,174,0.69,0.02,0.01,0.01,0.01,0.01,0.03,0.03,normal 0,tcp,http,SF,296,943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.02,0.04,0.01,0.00,0.01,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,8621,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,14,255,1.00,0.00,0.07,0.07,0.00,0.00,0.00,0.00,normal 10,tcp,smtp,SF,2376,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,149,166,0.55,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,120,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,210,566,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,1695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,1,0.01,0.00,0.94,1.00,0.01,1.00,0.00,245,1,0.00,0.52,0.00,0.00,0.00,0.00,0.47,1.00,anomaly 0,tcp,http,SF,306,1319,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,13,0.00,0.00,0.00,0.00,1.00,0.00,0.31,218,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1211,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,194,0.80,0.15,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,188,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.65,0.64,0.00,0.00,0.00,0.64,1.00,anomaly 0,udp,domain_u,SF,43,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,231,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,8015,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,243,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,24786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,2,1.00,1.00,0.00,0.00,0.01,0.09,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 59,tcp,http,SF,259,275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,164,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,31,47,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,17,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,57,0.22,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,9,0.00,0.00,0.00,0.00,0.60,0.33,0.00,255,9,0.04,0.78,0.26,0.00,0.10,0.00,0.64,0.00,anomaly 0,tcp,http,SF,538,6471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,446,446,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,247,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,186,46,0.25,0.02,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,8,1.00,1.00,0.00,0.00,0.42,0.21,0.00,255,67,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,35,1,0.03,0.74,0.77,0.00,0.77,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,283,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,2,255,1.00,0.00,0.50,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,341,786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,117,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,22,1.00,1.00,0.00,0.00,0.79,0.07,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 41802,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,216,2,0.01,0.23,0.44,0.00,0.00,0.00,0.44,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,3,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,10389,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,63,0.22,0.06,0.22,0.03,0.01,0.02,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,112,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,74,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,121,109,0.17,0.02,0.17,0.02,0.07,0.00,0.01,0.00,normal 0,udp,domain_u,SF,43,68,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,261,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,200,0.78,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1243,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,115,0.71,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,495,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,35,0.60,0.40,0.60,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,14,1.00,1.00,0.00,0.00,0.07,0.08,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,78,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,106,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,116,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,23,0.00,0.00,0.00,0.00,0.96,0.08,0.00,255,162,0.64,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1637,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,188,144,0.62,0.03,0.01,0.01,0.02,0.02,0.00,0.00,normal 0,tcp,http,SF,213,900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,130,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,18,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1232,333,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,148,0.58,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,266,499,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,12,255,1.00,0.00,0.08,0.04,0.08,0.00,0.00,0.00,normal 0,tcp,http,SF,285,2531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,13,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,225,1.00,0.00,0.00,0.01,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,41,26,0.15,0.12,0.15,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,15,1.00,1.00,0.00,0.00,0.13,0.04,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,3327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,19,255,1.00,0.00,0.05,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,1061,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,6,0.95,1.00,0.05,0.00,0.32,0.21,0.00,255,18,0.07,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,6,1.00,1.00,0.00,0.00,0.16,0.11,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,12,0.05,0.08,0.05,0.00,0.57,0.00,0.01,0.00,anomaly 0,udp,domain_u,SF,45,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,219,0.00,0.00,0.00,0.00,1.00,0.00,0.02,209,196,0.81,0.01,0.73,0.01,0.00,0.00,0.07,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,11,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,98,0.01,0.00,0.00,0.00,0.99,0.02,0.00,255,98,0.38,0.01,0.38,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,204,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,9,1.00,1.00,0.00,0.00,0.39,0.22,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,9,0.00,0.00,1.00,1.00,0.08,0.08,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,311,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,77,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.09,0.00,0.00,1.00,0.66,normal 0,tcp,ftp_data,SF,30,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,42,1.00,0.00,1.00,0.12,0.00,0.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,27,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 2,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.67,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.25,0.71,0.00,0.00,0.00,0.24,0.00,anomaly 0,tcp,http,SF,244,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,158,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,10,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,29,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,771,374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,112,172,0.88,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,2,0.00,0.00,0.00,0.00,0.25,0.25,0.00,255,237,0.93,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,254,5918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,6,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,330,13508,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,24,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.26,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4468,tcp,telnet,SF,166,23376,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,1408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,34,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,34,0.14,0.05,0.14,0.00,0.02,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,48,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,169,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,58,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,215,4,0.02,0.07,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,185,153,0.83,0.01,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,298,3571,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,pop_3,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,5,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,252,273544,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,22,0.09,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,27,4,0.15,0.22,0.04,0.00,0.48,1.00,0.04,0.00,anomaly 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,91,0.44,0.06,0.44,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,18881,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,18,1.00,1.00,0.00,0.00,0.06,0.04,0.00,140,18,0.13,0.07,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,14,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,259,1541,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,79,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1193,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,39,0.97,0.05,0.03,0.05,0.00,0.00,0.05,0.05,normal 0,udp,domain_u,SF,46,117,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 1,tcp,smtp,SF,1016,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,100,0.31,0.23,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,347,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,tcp,http,SF,237,5250,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,41,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,15,1.00,1.00,0.00,0.00,0.33,0.09,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,6721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,226,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,8,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,8,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,160,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,19,1.00,1.00,0.00,0.00,0.17,0.08,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,205,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,107,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,1,1.00,1.00,0.00,0.00,0.01,0.09,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,276,71903,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.02,0.04,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.68,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,172,15119,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,255,1.00,0.00,0.01,0.02,0.00,0.00,0.02,0.01,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,206,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,3891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,360,1738,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,347,807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,1225,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,224,4114,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,255,1.00,0.00,0.00,0.01,0.00,0.00,0.04,0.04,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,13,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,2435,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,265,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,15,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,3709,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,704,2070,0,0,0,14,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,31,0.31,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,186,14609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,205,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,pm_dump,SF,44,672,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.40,0.00,0.20,1.00,0.00,165,1,0.01,0.10,0.01,0.00,0.01,0.00,0.02,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,190,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,125,1.00,0.00,1.00,0.43,0.00,0.00,0.00,0.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,68,1,0.01,1.00,0.01,0.00,0.00,0.00,0.91,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,13,0.00,0.00,1.00,1.00,0.16,0.06,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 2,tcp,ftp,SF,1231,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,38,0.18,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,285,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,52,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,13,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,272,4841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,193,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,1148,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,69,1.00,0.00,0.07,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,1476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,12,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,10,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,29,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,370,274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,223,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,12,0.05,0.01,0.01,0.17,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.55,0.50,0.00,0.05,0.00,0.45,0.00,anomaly 0,tcp,smtp,SF,888,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,95,203,0.79,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,268,656,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,1,255,1.00,0.00,1.00,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,11,1.00,1.00,0.00,0.00,0.15,0.08,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,254,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,18,0.05,0.02,0.05,0.11,0.01,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,391,391,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,systat,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,2,0.64,0.50,0.36,0.50,0.01,0.42,0.00,255,2,0.01,0.36,0.87,0.00,0.55,0.50,0.32,0.50,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,84,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,257,1650,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,160,584,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,200,255,1.00,0.00,0.00,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,14,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,15,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 40703,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.37,0.73,0.00,0.00,0.00,0.73,1.00,anomaly 0,tcp,http,SF,210,10561,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,8,255,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,5,0.00,0.00,1.00,1.00,0.07,0.08,0.00,255,5,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,59,1,0.02,1.00,0.02,0.00,0.00,0.00,0.95,1.00,anomaly 0,tcp,http,SF,292,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,1444,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,10,0.00,0.00,1.00,1.00,0.07,0.07,0.00,163,10,0.06,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,365,1,0.10,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,11,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,186,14515,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,15,0.00,0.00,0.00,0.07,1.00,0.00,0.27,32,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,1,0.01,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.36,0.00,0.00,0.00,0.00,0.31,1.00,anomaly 0,tcp,http,SF,334,479,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,175,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,197,44,0.17,0.02,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,146,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,exec,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,1,0.07,0.00,0.93,1.00,0.01,1.00,0.00,255,1,0.00,0.67,0.00,0.00,0.03,0.00,0.39,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,194,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,7,1.00,1.00,0.00,0.00,0.50,0.29,0.00,255,27,0.11,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,46,255,1.00,0.00,0.02,0.20,0.00,0.00,0.91,0.93,normal 2,tcp,ftp,SF,1218,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,125,0.49,0.02,0.01,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,286,7833,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.07,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,7,0.00,0.00,0.00,0.00,0.88,0.25,0.00,255,7,0.03,0.23,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,11758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,132,255,1.00,0.00,0.01,0.04,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,355,8377,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,5,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,4,0.93,1.00,0.07,0.00,0.27,0.27,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,276,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,175,1.00,0.00,0.01,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,http,SF,149,13592,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,1831,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,17,0.19,0.04,0.19,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,42,0.70,0.00,0.00,0.00,0.30,0.05,0.00,255,42,0.16,0.84,0.16,0.00,0.09,0.00,0.75,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,10,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,1,0.00,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1230,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,22,19,0.86,0.14,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,3,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,20,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,6,0.02,0.18,0.02,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 29,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,240,0.94,0.02,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,330,772,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,358,358,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,398,1,0.07,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,149,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,319,731,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,8325,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,1,0.16,0.00,0.00,0.00,0.05,0.63,0.00,128,1,0.01,0.22,0.32,0.00,0.05,0.00,0.00,0.00,normal 0,tcp,http,SF,275,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.25,0.00,0.00,1.00,0.00,0.75,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,80,0.31,0.13,0.31,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,223,923,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,205,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,93,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,52,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,2996,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,4,255,1.00,0.00,0.25,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.18,0.00,0.82,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.25,0.00,0.75,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,2278,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,10,0.17,0.07,0.17,0.00,0.00,0.00,0.00,0.00,normal 8625,tcp,IRC,RSTR,1788,9968,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,23,6,0.26,0.13,0.04,0.00,0.00,0.00,0.26,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,789,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,332,1394,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,37,0.15,0.01,0.66,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,7980,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,81,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,81,0.32,0.02,0.32,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,303,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,73,0.60,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,7,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,13,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,366,2862,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,197,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,239,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,206,5015,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,7,255,1.00,0.00,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,252,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,92,0.36,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,32,0.19,0.05,0.19,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,7,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,80,1.00,0.00,0.01,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,http,SF,218,2839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,254,1.00,0.00,0.25,0.25,0.00,0.00,1.00,0.89,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,20,1.00,1.00,0.00,0.00,0.26,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,18,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,205,4858,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,197,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8556,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.38,0.70,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,4408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,2055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,300,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 37874,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,29228,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,127,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1684,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,39,0.22,0.11,0.04,0.05,0.04,0.00,0.04,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,87,0.25,0.38,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,131,1.00,0.00,1.00,0.39,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8325,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,46,0.53,0.03,0.53,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,6662,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,850,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,178,166,0.59,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1863,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,732,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,32,0.00,0.00,0.05,0.03,1.00,0.00,0.12,50,255,1.00,0.00,0.02,0.01,0.00,0.00,0.02,0.01,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,14,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,84,0.50,0.02,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,266,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,12,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,1317,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,64,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,2358,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,128,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,112,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,184,783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,17,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,40,1.00,0.00,0.50,0.38,0.00,0.00,1.00,1.00,normal 0,tcp,ftp_data,SF,1214,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,138,0.64,0.01,0.64,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,1,0.01,0.94,0.01,0.00,0.00,0.00,0.90,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,15,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,1801,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,7473,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,40,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,126,1,0.01,0.05,0.01,0.00,0.01,1.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,142,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,842,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,122,125,0.57,0.06,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,29,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,163,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,12,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,667,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.25,0.50,1.00,0.00,0.50,197,197,1.00,0.00,0.01,0.00,0.00,0.00,0.06,0.06,anomaly 0,udp,domain_u,SF,46,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,252,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,27,0.00,0.00,0.00,0.00,0.90,0.07,0.00,255,27,0.11,0.26,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,235,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,19,1.00,1.00,0.00,0.00,0.22,0.08,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,115,4,0.03,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,20,1.00,1.00,0.00,0.00,0.11,0.08,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,216,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.02,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,1,0.11,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.12,0.00,0.87,1.00,anomaly 0,tcp,http,SF,250,2196,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,36,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,296,1518,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,3,1.00,1.00,0.00,0.00,0.33,0.44,0.00,255,42,0.16,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,2056,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,49,0.57,0.14,0.57,0.04,0.05,0.00,0.00,0.00,normal 0,tcp,http,SF,333,1326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.14,1.00,0.00,0.29,255,242,0.95,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,36,0.00,0.00,0.00,0.00,1.00,0.00,0.08,90,231,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,289,658,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,2281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,38,0.00,0.00,0.00,0.00,1.00,0.00,0.05,135,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,337,1669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,35,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,91,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1964,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,45,46,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,telnet,RSTO,0,15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,227,2,0.00,0.03,0.00,1.00,0.00,0.00,0.00,0.50,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,49,1,0.02,0.08,0.02,0.00,0.12,0.00,0.02,1.00,anomaly 0,tcp,ftp_data,SF,373,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,90,0.35,0.02,0.35,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,164,136,0.83,0.01,0.01,0.00,0.00,0.00,0.83,1.00,normal 0,tcp,http,SF,185,4841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,18,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,37,0.15,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,telnet,SF,104,1608,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,1,0.08,0.31,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,32,255,1.00,0.00,0.03,0.04,0.00,0.01,0.00,0.01,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,54,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 26,tcp,ftp,SF,343,1063,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,25,0.26,0.05,0.01,0.00,0.00,0.00,0.01,0.04,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,17,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,632,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,1660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,20,0.95,1.00,0.05,0.00,0.48,0.10,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,246,2362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.22,0.22,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,20,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,149,7542,0,0,0,4,0,1,4,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,29,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,8,0.00,0.00,1.00,1.00,0.07,0.08,0.00,255,8,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,177,1531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1110,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,240,0.94,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,10,1.00,1.00,0.00,0.00,0.10,0.07,0.00,153,10,0.07,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,1146,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,4,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,3731,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,152,0.60,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.02,0.00,0.00,0.00,0.00,0.04,0.05,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,212,882,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,1367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1452,322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,246,0.97,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,33,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,200,20,0.10,0.06,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,14,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,6991,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,137,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,95,6,0.06,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,19,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.29,0.01,0.14,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,5604,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,162,19994,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,14,255,1.00,0.00,0.07,0.04,0.07,0.00,0.00,0.00,normal 0,tcp,http,SF,233,6329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,51,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,303,15021,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,85,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,219,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1013,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,203,146,0.52,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,7,1.00,1.00,0.00,0.00,0.11,0.08,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,927,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,109,408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,98,0.38,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,796,377,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,197,0.87,0.06,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,8584,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,0.91,0.00,0.00,0.07,0.00,0.75,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,11,1.00,1.00,0.00,0.00,0.30,0.16,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,337,7189,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,2344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.33,0.17,0.00,0.00,1.00,0.00,0.50,149,149,1.00,0.00,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,27,1,0.04,1.00,0.04,0.00,0.00,0.00,0.96,1.00,anomaly 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,2,0.64,0.50,0.36,0.50,0.01,0.41,0.00,255,2,0.01,0.34,0.82,0.00,0.53,0.50,0.29,0.50,anomaly 0,tcp,http,SF,326,1511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,255,1.00,0.00,0.00,0.01,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,338,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,312,2288,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,8784,0,0,0,2,0,1,2,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,35,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,238,21,0.09,0.03,0.09,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.02,0.25,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,61,210,1.00,0.00,0.02,0.10,0.00,0.00,1.00,1.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,53,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,185,4841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,176,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,3966,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,152,255,1.00,0.00,0.01,0.04,0.01,0.01,0.00,0.02,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,38,9,0.24,0.16,0.03,0.00,0.63,1.00,0.03,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,24,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.40,0.40,0.00,0.00,0.00,0.40,1.00,anomaly 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,308,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8766,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,97,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,122,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 5410,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10272,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,55,0.20,0.02,0.20,0.04,0.00,0.00,0.05,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,14,219,1.00,0.00,0.07,0.16,0.00,0.00,1.00,1.00,normal 0,tcp,http,S1,255,36500,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,1556,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,13,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,221,1481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,red_i,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,7,0.05,0.02,0.05,0.00,0.00,0.00,0.11,0.00,normal 0,tcp,http,SF,333,3679,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,42,0.17,0.04,0.17,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,SF,315,2777,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,38,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 252,tcp,http,SF,222,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,255,1.00,0.00,0.01,0.07,0.00,0.00,0.03,0.02,normal 0,tcp,http,SF,277,11830,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,14,0.00,0.00,0.00,0.00,1.00,0.00,0.36,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,300,0.00,0.00,0.00,0.00,1.00,0.00,0.01,148,109,0.74,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 7,tcp,telnet,SF,102,1442,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,1,0.04,0.18,0.04,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,28,0.50,0.30,0.50,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,13,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,2053,360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,127,0.57,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2004,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,114,172,0.62,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,136,1.00,0.00,1.00,0.16,0.00,0.00,1.00,0.97,normal 0,tcp,other,SF,14189,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,177,1,0.01,0.08,0.08,0.00,0.02,0.00,0.00,0.00,normal 7,tcp,telnet,SF,103,2853,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,4,0.03,0.03,0.01,0.50,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,952,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,187,158,0.63,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,131,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,206,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,164,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,domain,SF,48,486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,55,1,0.00,0.00,0.00,0.00,0.02,0.04,0.00,255,1,0.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,16,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,10073,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,67,0.27,0.02,0.27,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,5309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,787,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.02,0.00,0.00,0.98,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1714,376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,207,0.96,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,236,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,1423,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,34,0.27,0.05,0.27,0.00,0.02,0.00,0.49,0.00,anomaly 0,tcp,smtp,SF,789,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,176,0.93,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,11,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,369,7931,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,50,251,1.00,0.00,0.02,0.16,0.00,0.00,1.00,1.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,12,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp,SF,1153,2445,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,224,52,0.23,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,4,0.00,0.00,0.00,0.00,0.21,0.16,0.00,255,4,0.02,0.91,0.10,0.00,0.16,0.00,0.75,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,247,1.00,0.00,0.50,0.07,0.00,0.00,1.00,0.62,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,3632,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1392,481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,12,1.00,1.00,0.00,0.00,0.63,0.21,0.00,255,58,0.23,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1096,tcp,IRC,RSTR,115,1567,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,3,0.75,0.50,0.25,0.00,0.25,0.33,0.50,0.67,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,3,1.00,1.00,0.00,0.00,0.43,0.43,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,252,1133,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,12,255,1.00,0.00,0.08,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,1240,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,7,223,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,106,5,0.05,0.05,0.01,0.00,0.02,0.20,0.00,0.00,normal 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,9178,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,21,0.08,0.02,0.08,0.00,0.00,0.00,0.77,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,16,0.86,0.00,0.00,0.00,0.14,0.06,0.00,255,16,0.06,0.94,0.06,0.00,0.09,0.00,0.85,0.00,anomaly 0,tcp,auth,SF,10,39,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,12,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,80,60,0.75,0.03,0.75,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,1991,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,19,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,1,0.03,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,tcp,http,SF,293,2400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,43,0.00,0.00,0.00,0.00,1.00,0.00,0.12,158,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,199,3413,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,26,0.00,0.00,0.00,0.00,1.00,0.00,0.12,115,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,20,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,1901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,1630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,1.00,1.00,0.00,0.00,1.00,0.00,0.00,6,4,0.67,0.33,0.17,0.00,0.67,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,6,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,1543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,181,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,finger,SF,9,413,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,4,0.01,0.03,0.01,0.50,0.00,0.00,0.83,0.00,normal 0,tcp,smtp,SF,645,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,159,0.88,0.17,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,19,0.00,0.00,1.00,1.00,0.06,0.05,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,SF,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,4,0.02,0.07,0.02,0.50,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.80,0.27,normal 0,tcp,http,SF,264,295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,128,127,0.41,0.03,0.01,0.02,0.00,0.00,0.02,0.03,normal 0,tcp,auth,SF,9,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,12,0.05,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1334,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,62,176,0.71,0.06,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,264,1478,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,5,1.00,0.80,0.00,0.20,0.57,0.29,0.40,167,44,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,4184,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,23,0.00,0.00,0.00,0.00,1.00,0.00,0.17,250,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,49,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,49,0.19,0.04,0.19,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,711,399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,225,162,0.72,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,965,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,49,0.19,0.02,0.19,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,2198,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,298,7299,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,24,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,180,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,308,308,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,6,1.00,1.00,0.00,0.00,0.22,0.22,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.11,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,25,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.51,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,1,0.01,0.00,0.93,1.00,0.01,1.00,0.00,255,1,0.00,0.34,0.00,0.00,0.00,0.00,0.30,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,41,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,ftp,SF,55,170,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,38,0.26,0.03,0.01,0.00,0.02,0.08,0.00,0.00,normal 0,tcp,http,SF,182,886,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,950,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,160,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 41111,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.31,0.61,0.00,0.00,0.00,0.61,1.00,anomaly 0,tcp,http,SF,302,3415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,173,438,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,255,1.00,0.00,0.01,0.01,0.00,0.00,0.02,0.01,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,1,0.06,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,0.91,0.00,0.00,0.05,0.00,0.80,1.00,anomaly 0,udp,domain_u,SF,44,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,130,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,225,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.20,0.00,0.80,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.84,1.00,anomaly 0,tcp,finger,SF,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,9,0.02,1.00,0.02,0.22,0.00,0.00,0.92,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,15,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,2840,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.01,normal 1,tcp,smtp,SF,752,345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,109,0.43,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,1675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,9,255,1.00,0.00,0.11,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1256,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,173,0.68,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 2969,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,10,1.00,0.00,1.00,0.30,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,234,224,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,19,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,18,0.07,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,316,473,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,934,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,133,1,0.01,0.08,0.10,0.00,0.00,0.00,0.10,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,24,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,933,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,124,0.49,0.03,0.00,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,9311,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,200,87,0.44,0.01,0.44,0.00,0.00,0.01,0.00,0.00,normal 687,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.56,0.89,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,finger,SF,6,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,2,0.01,0.55,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,215,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,39,1.00,0.00,1.00,0.54,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,275,833,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,162,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,861,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,239,0.64,0.18,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,375,3119,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.06,0.00,0.00,1.00,0.41,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,9,1.00,0.00,1.00,0.22,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,2211,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,13,0.00,0.00,1.00,1.00,0.11,0.08,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,350,937,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 36,tcp,ftp,SF,1463,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,1,0.50,1.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,245,776,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,42,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.02,normal 0,tcp,http,SF,186,12984,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,34,218,1.00,0.00,0.03,0.02,0.03,0.01,0.38,0.27,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,127,0.50,0.01,0.50,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,16,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1917,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.83,167,240,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,2446,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,14,1.00,1.00,0.00,0.00,0.27,0.08,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,2047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,231,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,218,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,208,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,3,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,2495,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,S3,1493,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,132,145,0.32,0.05,0.01,0.01,0.02,0.01,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,59,4,0.07,0.10,0.07,0.00,0.00,0.00,0.00,0.00,normal 24,tcp,smtp,SF,847,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,129,0.58,0.06,0.01,0.02,0.00,0.09,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,32,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,17,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,9,1.00,0.00,1.00,0.56,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,5,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1153,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,34,0.15,0.06,0.15,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,3,1.00,0.67,0.00,0.00,0.04,0.10,0.67,250,6,0.01,0.06,0.00,0.33,1.00,0.33,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.22,0.41,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,21,255,1.00,0.00,0.05,0.17,0.00,0.00,1.00,0.98,normal 0,tcp,http,SF,142,27062,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,3,13,0.00,0.00,0.00,0.08,1.00,0.00,0.31,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,4,0.00,0.00,1.00,1.00,0.06,0.09,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,227,1074,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,255,1.00,0.00,0.01,0.05,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,297,7339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,63,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,452,452,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,49,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1030,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,38,0.38,0.19,0.38,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,30881,0,0,0,1,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,495,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,852,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,84,0.33,0.03,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,117,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,11,243,1.00,0.00,0.09,0.19,0.00,0.00,1.00,0.98,normal 22,tcp,ftp,SF,332,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,246,44,0.18,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,212,0.83,0.10,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,2,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,50,1,0.02,1.00,0.02,0.00,0.00,0.00,0.96,1.00,anomaly 0,udp,private,SF,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,9,0.00,0.00,0.00,0.00,0.75,0.17,0.00,255,9,0.04,0.96,0.05,0.00,0.17,0.00,0.78,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,239,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,212,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,62,0.13,0.03,0.13,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,18,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,95,255,1.00,0.00,0.02,0.10,0.00,0.00,0.45,0.71,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,8,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,308,1159,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,1792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,167,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.62,0.62,1.00,0.00,0.00,24,171,1.00,0.00,0.04,0.19,0.00,0.00,0.83,0.98,normal 0,tcp,smtp,SF,804,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,35,0.54,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,18,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,313,1422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,8,162,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,416,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,203,1.00,0.00,0.11,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,3085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.05,0.00,0.00,0.86,0.38,normal 0,tcp,http,SF,341,4291,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,1.00,1.00,0.00,0.00,1.00,0.00,0.00,49,29,0.59,0.04,0.02,0.00,0.96,0.93,0.00,0.00,anomaly 2,tcp,smtp,SF,2140,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,101,0.57,0.04,0.01,0.02,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,319,274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,2159,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,2055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 31,tcp,ftp,SF,58,189,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,148,26,0.18,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2780,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,147,0.38,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 5080,tcp,ftp,SF,1042,2279,0,0,0,3,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,22,0.09,0.02,0.00,0.00,0.13,0.00,0.00,0.00,anomaly 0,tcp,http,SF,222,2522,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,11440,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,23,0.00,0.00,0.08,0.09,1.00,0.00,0.17,23,255,1.00,0.00,0.04,0.01,0.00,0.00,0.04,0.01,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,9,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,216,654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,195,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,195,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,333,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,145,255,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 4,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.02,0.01,0.00,0.00,0.00,0.84,1.00,anomaly 0,tcp,http,SF,245,15255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,91,0.00,0.00,0.00,0.00,1.00,0.00,0.14,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,83,206,1.00,0.00,0.01,0.02,0.00,0.00,0.83,0.93,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,114,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,2,1.00,1.00,0.00,0.00,0.04,0.09,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1507,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,54,0.61,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,66,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,273,500,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,25,255,1.00,0.00,0.04,0.05,0.04,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,177,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,301,4724,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.14,1.00,0.00,0.29,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,114,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,205,0.80,0.02,0.80,0.00,0.00,0.00,0.14,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,15,0.00,0.00,1.00,1.00,0.14,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 9431,tcp,IRC,RSTR,843,9547,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,1.00,0.50,1.00,0.00,145,23,0.16,0.01,0.01,0.00,0.00,0.00,0.12,0.74,normal 0,tcp,ftp_data,SF,15377,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,126,44,0.23,0.03,0.23,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,247,38,0.15,0.02,0.15,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,167,12937,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,9,255,1.00,0.00,0.11,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,242,3322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,22,22,1.00,0.00,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,19,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,106,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,207,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,5,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,221,2174,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,2942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,143,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,235,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,181,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,9,1.00,1.00,0.00,0.00,0.09,0.07,0.00,211,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1917,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,76,0.30,0.34,0.00,0.00,0.34,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,195,0.76,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,305,305,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,53,0.36,0.05,0.36,0.00,0.01,0.00,0.43,0.00,anomaly 0,tcp,http,SF,218,10179,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,63,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,41,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,3,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1182,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,191,0.94,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.81,0.81,1.00,0.00,0.00,24,177,1.00,0.00,0.04,0.21,0.00,0.00,0.83,0.98,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,1630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,53,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,17,0.07,0.01,0.07,0.00,0.78,0.00,0.00,0.00,normal 0,tcp,http,SF,208,757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,150,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,2540,323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,124,0.49,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,86,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,193,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,66,0.01,0.00,0.00,0.00,0.99,0.03,0.00,255,66,0.26,0.01,0.26,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,228,1590,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,2769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,5,141,1.00,0.00,0.20,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,5524,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,12,0.97,1.00,0.03,0.00,0.36,0.09,0.00,255,5,0.02,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,5,1.00,1.00,0.00,0.00,0.33,0.20,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,14210,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,2113,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,218,36749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,61,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,151,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,77,0.82,0.18,0.82,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,578,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,270,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,1718,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,7,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,1728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,0.24,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,20658,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,39,0.28,0.04,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,317,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 37749,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,3676,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,174,121,0.62,0.02,0.62,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,301,10063,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1186,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,158,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.04,normal 0,tcp,smtp,SF,1723,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,16,12,0.75,0.12,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,16,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,private,RSTO,6,18056,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,77,1,0.00,0.00,0.94,1.00,0.01,1.00,0.00,202,1,0.00,0.44,0.00,0.00,0.00,0.00,0.37,1.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,3207,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,207,3452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,2,0.98,1.00,0.00,0.00,0.02,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,73,126,0.26,0.05,0.03,0.02,0.01,0.01,0.00,0.00,normal 1714,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.66,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,13,1.00,0.00,0.08,0.00,0.00,0.00,0.08,0.08,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,176,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1267,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,136,0.78,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.00,0.00,0.12,0.38,0.00,255,7,0.03,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,254,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,finger,SF,7,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,10,0.03,0.03,0.01,0.20,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,13,1.00,0.00,0.08,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,315,1086,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.12,0.06,1.00,0.00,0.24,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,176,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,3,1.00,1.00,0.00,0.00,0.75,0.50,0.00,255,60,0.24,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,164,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,246,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,2402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 39667,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,374,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,155,5,0.97,0.00,0.00,0.00,0.03,0.06,0.00,255,11,0.04,0.06,0.04,0.00,0.96,0.00,0.00,0.00,normal 5,tcp,smtp,SF,1048,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,125,198,0.80,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.05,0.00,0.94,1.00,0.00,0.96,0.00,255,1,0.00,0.96,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,93111,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.03,0.03,0.01,0.00,0.00,normal 0,tcp,http,SF,274,3225,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,44,0.00,0.00,0.00,0.00,1.00,0.00,0.11,155,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1505,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,191,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,1337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,27,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,190,1227,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,57,0.00,0.00,0.00,0.00,1.00,0.00,0.07,220,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,5567,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,1,0.25,0.50,0.25,0.00,0.00,0.00,0.00,0.00,normal 19,tcp,smtp,SF,955,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,156,0.56,0.07,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,189,31876,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,879,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,128,0.50,0.02,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,14087,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.59,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,253,253,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,12,0.00,0.00,1.00,1.00,0.18,0.08,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,3307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,85,121,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,1197,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.33,0.00,0.00,0.00,normal 0,tcp,telnet,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,42,1,0.02,0.10,0.02,0.00,0.02,1.00,0.00,0.00,normal 5,tcp,http,SF,268,279,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,106,102,0.96,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,997,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,1137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,4,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,9,0.95,0.89,0.05,0.11,0.36,0.23,0.22,255,28,0.11,0.05,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,3521,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,3,12,1.00,0.00,0.67,0.33,0.33,0.08,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.62,0.92,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,6,0.00,0.00,0.00,0.00,0.21,0.07,0.00,255,7,0.03,0.01,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,674,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,10044,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 7,tcp,other,SF,1766,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,1,0.00,0.04,0.37,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,1817,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,225,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5558,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,97,0.52,0.06,0.52,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,343,10925,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,897,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,181,134,0.43,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,338,1179,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,other,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,0.99,1.00,anomaly 0,tcp,http,SF,305,660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1338,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,92,221,0.96,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,492,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,10,1.00,1.00,0.00,0.00,0.26,0.11,0.00,255,30,0.12,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,52,52,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,1,1.00,1.00,0.00,0.00,0.02,0.10,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,3,1.00,1.00,0.00,0.00,0.21,0.21,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,749,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,42,0.16,0.02,0.16,0.00,0.55,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,501,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,20,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,170,37014,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2600,286,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,139,114,0.48,0.06,0.01,0.02,0.01,0.02,0.01,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,1.00,1.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,133,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,201,0.79,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,142,14,0.02,0.03,0.02,0.14,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,359,1402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,9928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,174,3159,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,26,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1145,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,104,0.57,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,174,0.68,0.02,0.68,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,380,1770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,35,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,14,1.00,1.00,0.00,0.00,0.28,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,149,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,2325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,198,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,214,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,89,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,176,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,200,1.00,0.00,0.33,0.18,0.00,0.00,1.00,1.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,81,0.32,0.11,0.95,0.00,0.00,0.00,0.05,0.00,anomaly 7,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,298,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 25641,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.64,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,198,1705,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,19714,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.04,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,191,13667,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,169,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,236,0.93,0.04,0.93,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,283,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,2325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,239,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,208,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,87,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 171,tcp,http,SF,330,538,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,7,255,1.00,0.00,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,124,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,6763,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,58,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,7,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 38776,tcp,bgp,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,496,496,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,358,2085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,16,1.00,1.00,0.00,0.00,0.13,0.07,0.00,24,16,0.67,0.17,0.04,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,14,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,ftp,SF,1170,2447,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,18,0.15,0.05,0.01,0.00,0.02,0.00,0.07,0.00,anomaly 0,udp,other,SF,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.64,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,74,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,149,0.70,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,131,1.00,0.00,1.00,0.31,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,1116,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,11052,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,126,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,90,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.36,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,90,0.98,0.05,0.98,0.28,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,209,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,14,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,188,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,1,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7162,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.07,0.05,0.00,0.89,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.16,0.00,0.84,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.02,0.00,0.98,1.00,anomaly 20,tcp,smtp,SF,1205,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,178,0.70,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 3,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,35,0.38,0.12,0.38,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,346,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,335,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,18,1.00,1.00,0.00,0.00,0.13,0.04,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,18,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1693,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,143,179,0.64,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,20,1.00,1.00,0.00,0.00,0.07,0.04,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,861,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,129,0.55,0.09,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1132,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,141,0.54,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1585,442,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,155,106,0.59,0.05,0.01,0.02,0.01,0.00,0.01,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,0.69,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,25,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,8,1.00,1.00,0.00,0.00,0.24,0.12,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,SF,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,11,0.09,0.04,0.02,0.18,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,282,4624,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,9,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,9,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,191,2241,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,11,0.12,0.09,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,1522,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,200,1308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,143,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,35,95,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,49,31,0.63,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 2035,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.62,0.87,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1737,441,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,178,0.95,0.11,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,1,0.00,0.00,1.00,1.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1459,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,166,124,0.43,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,185,5717,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,62,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,81,0.80,0.40,0.80,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,143,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,362,242,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,236,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,14,1.00,1.00,0.00,0.00,0.33,0.10,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,865,453,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,31,0.12,0.06,0.00,0.00,0.67,0.00,0.00,0.00,normal 0,tcp,http,SF,208,15642,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,169,110,0.65,0.02,0.01,0.00,0.00,0.00,0.01,0.02,normal 0,tcp,http,SF,215,12984,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,247,1.00,0.00,0.50,0.11,0.00,0.00,1.00,0.88,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,80,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,tcp,finger,SF,13,144,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,11,0.07,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,7,0.00,0.00,0.00,0.00,0.14,0.10,0.43,255,7,0.03,0.01,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,7973,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,645,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,119,131,0.50,0.06,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,187,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,223,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,354,354,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,350,143,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,2,11,1.00,0.00,0.50,0.45,0.00,0.00,0.50,0.91,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,17,2,0.12,0.29,0.06,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,367,2906,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,13,255,1.00,0.00,0.08,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,2647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,2713,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,693,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,auth,SF,10,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,8,0.03,0.02,0.01,0.25,0.00,0.00,0.03,0.00,normal 0,udp,domain_u,SF,46,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,109,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,678,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,18,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,2,0.00,0.00,0.00,0.00,0.17,0.67,0.00,255,2,0.01,0.26,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 3,tcp,smtp,SF,992,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,22,25,0.82,0.14,0.05,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,35,118,1.00,0.00,0.03,0.22,0.00,0.00,1.00,1.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,19,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.63,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,34,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,88,42,0.48,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,253,1.00,0.00,0.50,0.17,0.00,0.00,1.00,0.93,normal 20,tcp,telnet,SF,102,1341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,1,0.01,0.07,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,211,8222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,43,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,203,1762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 6,tcp,gopher,SF,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,2,0.02,1.00,0.02,1.00,0.00,0.00,0.92,0.50,anomaly 0,tcp,ftp,SF,1230,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,1,0.01,0.03,0.01,0.00,0.01,0.00,0.01,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,2,1.00,1.00,0.00,0.00,0.25,0.38,0.00,248,62,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,320,709,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1561,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,118,0.71,0.03,0.01,0.00,0.00,0.00,0.03,0.03,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,12,0.96,1.00,0.04,0.00,0.24,0.12,0.00,255,53,0.21,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,131,1.00,0.00,1.00,0.20,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,17,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,200,10,0.05,0.06,0.00,0.00,0.93,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,1.00,1.00,0.00,0.00,0.33,0.67,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,248,19,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,2,0.00,0.00,1.00,1.00,0.04,0.54,0.00,226,2,0.01,0.14,0.25,0.00,0.01,0.00,0.46,1.00,anomaly 0,tcp,ssh,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,2,0.33,1.00,0.33,1.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1195,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,77,122,0.73,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,231,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.97,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,176,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,95,0.01,0.00,0.01,0.00,0.98,0.03,0.00,255,95,0.37,0.02,0.37,0.00,0.00,0.00,0.47,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,63,1.00,0.00,0.02,0.00,0.00,0.00,0.19,0.19,anomaly 0,tcp,ftp_data,SF,1376,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,15,0.35,0.19,0.35,0.13,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,380,380,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,13335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.05,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.92,1.00,anomaly 0,tcp,http,SF,201,1474,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,172,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,31,0.30,0.68,0.29,0.00,0.00,0.00,0.64,0.03,normal 0,tcp,auth,SF,10,39,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,3,0.01,0.06,0.01,0.67,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,1,0.05,0.00,0.94,1.00,0.01,1.00,0.00,255,1,0.00,0.81,0.00,0.00,0.03,0.00,0.62,1.00,anomaly 37688,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,33,0.13,0.45,0.67,0.00,0.03,0.00,0.31,0.00,anomaly 0,tcp,http,SF,195,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1130,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,167,0.67,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 318,tcp,http,SF,334,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,32,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,69,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,313,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,1511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,15560,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,75,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,512,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,240,67,0.24,0.30,0.01,0.03,0.00,0.00,0.27,0.00,normal 0,tcp,http,S2,54540,8315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,246,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,19271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,545,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,319,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,20,10,0.10,0.20,0.10,0.20,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,162,0.64,0.03,0.64,0.00,0.00,0.00,0.00,0.00,anomaly 32,tcp,ftp,SF,104,449,0,0,0,2,0,1,0,0,0,0,1,0,1,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,6601,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,87,0.35,0.03,0.35,0.02,0.00,0.00,0.02,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,1.00,1.00,0.00,0.00,0.50,1.00,0.00,25,2,0.08,0.72,0.68,0.00,0.68,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,151,1,0.99,0.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.06,0.01,0.00,0.99,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,269,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,232,11,0.03,0.01,0.03,0.18,0.86,0.00,0.00,0.00,normal 0,tcp,http,SF,236,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,1.00,1.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.05,1.00,0.95,0.00,anomaly 0,tcp,http,SF,341,546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,44,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,17,0.98,1.00,0.02,0.00,0.36,0.09,0.00,255,8,0.03,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 915,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.53,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,112,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,508,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,2289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,17,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,88,114,0.35,0.09,0.40,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,S2,179,273545,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.50,1.00,0.00,0.00,0.50,1.00,0.00,255,218,0.85,0.04,0.00,0.00,0.02,0.01,0.00,0.00,normal 0,tcp,http,SF,298,702,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,1.00,1.00,0.00,0.00,1.00,0.00,0.00,186,138,0.45,0.01,0.01,0.01,0.99,0.61,0.00,0.00,anomaly 0,tcp,http,SF,218,1785,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,49,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,1282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,23,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 6214,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.61,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,342,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,1448,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,167,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,187,0.00,0.00,0.00,0.00,1.00,0.00,0.00,222,128,0.58,0.03,0.58,0.00,0.01,0.00,0.28,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,26,0.10,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,311,311,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,202,4798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7196,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,28,0.17,0.07,0.17,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,10,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,43,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,10,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,1.00,0.39,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,8,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,18,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.16,0.00,0.82,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.20,0.00,0.80,1.00,anomaly 0,udp,domain_u,SF,43,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,132,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 22,tcp,ftp,SF,230,769,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,15,0.19,0.04,0.01,0.00,0.05,0.13,0.01,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,361,1,0.06,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.90,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,6,1.00,1.00,0.00,0.00,0.26,0.17,0.00,255,37,0.15,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,266,5627,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,1270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.04,0.04,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,9586,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,12,226,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,10,0.05,0.03,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,16,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,SF,48,497,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,69,1,0.00,0.00,0.00,0.00,0.01,0.04,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,62,0.40,0.04,0.40,0.00,0.01,0.00,0.40,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,150,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,18,1.00,1.00,0.00,0.00,0.13,0.04,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,81,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,20,1.00,0.95,0.00,0.05,0.51,0.05,0.10,197,59,0.30,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,320,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,113,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,3,1.00,1.00,0.00,0.00,0.30,0.40,0.00,255,63,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,206,867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,1039,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,3,0.09,0.09,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,39,46,0.23,0.10,0.23,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,13,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,884,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,6,0.46,0.23,0.46,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,460,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,155,155,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,95,0.72,0.08,0.72,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,15,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,15,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,663,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,3938,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 8257,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.65,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,21,21,1.00,0.00,0.05,0.00,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,112,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,112,0.44,0.02,0.44,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,741,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,130,0.67,0.14,0.02,0.02,0.00,0.02,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,15,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,1305,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,3,1.00,1.00,0.00,0.00,0.50,0.33,0.00,255,23,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,259,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,89,0.35,0.08,0.42,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.49,0.48,0.00,0.00,0.00,0.49,1.00,anomaly 0,tcp,http,SF,267,1436,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,33,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,domain,SF,48,491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,65,1,0.00,0.00,0.00,0.00,0.02,0.03,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,264,14600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,1.00,0.33,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,4,1.00,1.00,0.00,0.00,0.24,0.12,0.00,44,5,0.09,0.07,0.02,0.40,1.00,0.80,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,8,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,5,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,320,911,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,61,0.00,0.00,0.00,0.00,1.00,0.00,0.08,159,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,10,0.00,0.00,1.00,1.00,0.05,0.08,0.00,255,10,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,807,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,145,0.60,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1386,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,183,99,0.54,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,685,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,2491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 3,tcp,smtp,SF,2432,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,74,98,0.85,0.04,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,31,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,15,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,143,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,125,0.49,0.02,0.49,0.00,0.00,0.00,0.00,0.00,normal 2670,tcp,telnet,SF,176,13070,0,0,0,0,0,1,2,0,1,2,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.02,0.00,0.00,0.99,0.98,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,3,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,108,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,360,9768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,37,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,13,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,2090,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,191,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,926,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,126,0.59,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,650,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,255,1.00,0.00,0.01,0.04,0.00,0.01,0.01,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1891,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,186,141,0.59,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,69,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,162,18666,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.33,27,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,2084,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,74,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,151,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,56,0.46,0.02,0.46,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,884,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,61,0.26,0.04,0.26,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,6,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,56,0.83,0.33,0.83,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,8064,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,1505,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,14,1.00,1.00,0.00,0.00,0.27,0.12,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,5,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,3,0.60,0.60,0.60,0.00,0.00,0.00,0.00,0.00,anomaly 3660,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,3,0.01,0.79,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,10378,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,3,1,0.33,1.00,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,76,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,108,0.78,0.03,0.78,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,RSTO,0,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,2,0.50,1.00,0.50,1.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,290,751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,11,238,1.00,0.00,0.09,0.22,0.00,0.00,1.00,1.00,normal 407,tcp,telnet,SF,284,8734,0,0,0,0,0,1,3,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,19,0.07,0.07,0.00,0.00,0.66,0.00,0.01,0.11,normal 0,tcp,http,SF,346,1943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,257,15697,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,23,0.00,0.00,0.00,0.00,1.00,0.00,0.22,39,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,38,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,4,0.02,0.05,0.01,0.50,0.00,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,4,0.88,1.00,0.12,0.00,0.50,0.50,0.00,255,2,0.01,0.08,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,166,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,37,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,965,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,60,0.36,0.06,0.36,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,28,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.16,0.00,0.00,1.00,0.92,normal 0,tcp,http,SF,208,885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,16,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,13891,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,131,0.12,0.08,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,7464,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,418,537,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,16,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,375,1798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,70,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,85,0.24,0.03,0.24,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2370,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,185,133,0.42,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,3142,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,207,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,214,0.84,0.01,0.84,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,107,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1782,493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,udp,domain_u,SF,43,67,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,143,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,20,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,254,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,4,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,208,767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 730,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.66,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,151,9578,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,1874,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,125,0.49,0.03,0.49,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,9,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,83,249,1.00,0.00,0.01,0.11,0.00,0.00,0.53,0.79,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,27,0.11,0.24,0.11,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,4,1.00,1.00,0.00,0.00,0.17,0.21,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1153,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.95,0.00,0.00,1.00,0.00,0.10,79,87,0.20,0.08,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,1860,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,87,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,243,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,1.00,0.04,0.50,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,168,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,1410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,2,0.00,0.00,0.00,0.00,0.12,0.19,0.00,255,51,0.20,0.32,0.88,0.00,0.00,0.00,0.12,0.00,anomaly 0,tcp,ftp_data,S1,88382,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,14,14,0.07,0.07,0.00,0.00,1.00,0.00,0.00,232,82,0.35,0.03,0.35,0.00,0.02,0.04,0.00,0.00,normal 0,tcp,http,SF,263,1630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,2,0.14,0.21,0.07,0.00,0.50,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,11,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1208,433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,155,0.50,0.21,0.07,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,2052,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,25,0.10,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,1,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,191,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,206,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,260,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,11,251,1.00,0.00,0.09,0.20,0.00,0.00,1.00,0.92,normal 0,tcp,http,SF,299,1107,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,69,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,206,5739,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,222,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,15,1.00,1.00,0.00,0.00,0.11,0.04,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,4504,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,38,0.00,0.00,0.00,0.00,1.00,0.00,0.08,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.01,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,597,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,47,0.00,0.00,0.00,0.00,1.00,0.00,0.04,29,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3248,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,137,0.82,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,18,1.00,1.00,0.00,0.00,0.24,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,339,3088,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,37,0.00,0.00,0.00,0.00,1.00,0.00,0.14,42,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,22,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,15,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,273,8193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,255,1.00,0.00,0.01,0.03,0.00,0.00,0.01,0.01,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6,tcp,smtp,SF,1580,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,59,0.66,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,41,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,192,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,29,0.00,0.03,0.00,0.00,1.00,0.00,0.24,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,206,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,SF,1259,2453,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,55,0.22,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,302,2348,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_2,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,107,0.50,1.00,0.50,0.03,0.50,0.00,0.00,0.00,normal 0,tcp,http,SF,296,1509,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,1032,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,11,1.00,0.00,1.00,0.55,0.00,0.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,29,29,1.00,0.00,0.03,0.00,0.00,0.00,1.00,1.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,356,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,222,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,101,255,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,39,1,0.03,0.74,0.79,0.00,0.79,1.00,0.00,0.00,anomaly 0,tcp,http,SF,381,622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,29,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,86,0.39,0.06,0.39,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,329,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,15,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,18,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.18,0.17,0.00,0.00,0.00,0.17,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,30,0.12,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 7701,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.53,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,256,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,6,1.00,1.00,0.00,0.00,0.21,0.14,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,374,267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,21,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,3270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,37,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,223,1,0.00,0.96,0.96,0.00,0.96,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,141,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,217,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,244,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,104,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,458,458,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,52,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,374,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,96,1.00,0.00,1.00,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,12,0.05,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,33,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,156,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,61,0.39,0.01,0.39,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,307,27740,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,267,3403,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,16,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1199,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,36,0.13,0.04,0.13,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,5280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1529,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,1218,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,1,0.02,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.76,0.00,0.00,0.01,0.00,0.71,1.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,124,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,205,0.80,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,5,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 27,tcp,ftp,SF,694,2077,0,0,0,14,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,224,42,0.19,0.04,0.00,0.00,0.00,0.00,0.01,0.05,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,11,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,460,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,6,16,1.00,0.00,0.17,0.19,0.17,0.06,0.00,0.00,normal 0,tcp,smtp,SF,1527,522,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,70,243,0.93,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,14,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,85,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,3298,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,50,61,0.00,0.00,0.00,0.00,1.00,0.00,0.03,219,219,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 29,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,0.50,1.00,0.40,125,120,0.96,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 26,tcp,smtp,SF,2091,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,44,0.44,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,1451,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,358,1640,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,68,0.52,0.12,0.52,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,2656,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,117,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,2654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,13,41,1.00,0.00,0.08,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,1349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,150,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9,tcp,smtp,SF,1357,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,158,0.89,0.22,0.11,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,77,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,20,20,1.00,0.00,0.05,0.00,0.00,0.00,1.00,1.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,482,482,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,90,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,4,0.00,0.00,0.00,0.00,0.21,0.11,0.00,255,16,0.06,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,8,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,226,447,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,40,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,22,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,24,1.00,1.00,0.00,0.00,0.09,0.04,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,18,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,8,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,142,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,193,0.76,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 22861,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 3,tcp,smtp,SF,2010,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,213,148,0.61,0.07,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,186,256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,26,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,46,0.18,0.04,0.18,0.00,0.04,0.00,0.00,0.00,anomaly 0,tcp,http,SF,380,1398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,9284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,255,22,0.09,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,595,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,188,0.74,0.03,0.74,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,3,1.00,1.00,0.00,0.00,0.03,0.09,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,212,0.00,0.00,0.00,0.00,1.00,0.00,0.02,202,196,0.80,0.01,0.72,0.01,0.00,0.00,0.07,0.00,normal 0,tcp,http,SF,314,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,26,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,28,0.11,0.07,0.11,0.00,0.82,0.00,0.00,0.00,normal 0,tcp,smtp,SF,834,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,182,0.73,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,1924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,14,255,1.00,0.00,0.07,0.07,0.00,0.01,0.00,0.00,normal 27018,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,9,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10,tcp,smtp,SF,954,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,139,0.66,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1046,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,207,23,0.11,0.06,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,54,1.00,0.00,0.50,0.22,0.00,0.02,1.00,0.96,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,1,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,85,0.89,0.06,0.89,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,10,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,9,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,101,0.40,0.02,0.40,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,326,942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,219,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,131,0.00,0.00,0.00,0.00,0.87,0.03,0.00,255,168,0.66,0.04,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,226,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,78,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,1345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,18,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,2783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,1713,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,41,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,8,1.00,0.12,0.00,0.00,0.01,0.07,0.25,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,181,9442,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,1456,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,19,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,634,451,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,232,0.69,0.06,0.02,0.01,0.29,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,3,0.09,0.09,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,685,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,154,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,306,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,9,0.43,0.14,0.05,0.00,0.33,0.00,0.00,0.00,normal 0,tcp,http,SF,213,4663,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,4,1.00,1.00,0.00,0.00,0.15,0.19,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.50,1.00,0.00,0.75,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,92,0.03,0.14,0.03,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,339,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,1321,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,8,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,70,79,0.49,0.06,0.49,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,35,0.33,0.04,0.33,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,299,2324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.33,0.00,255,232,0.91,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,118,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,237,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,193,0.76,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,349,413,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,29,0.11,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,16,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,13,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,1,0.02,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.72,0.00,0.00,0.01,0.00,0.67,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,97,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,298,1241,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.45,48,225,1.00,0.00,0.02,0.04,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,340,821,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,101,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.01,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,158,49,0.31,0.04,0.31,0.00,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,229,20,0.08,0.03,0.08,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,13,1.00,1.00,0.00,0.00,0.28,0.11,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,42,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,312,312,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,31,0.26,0.04,0.26,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.11,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,325,503,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 12278,tcp,telnet,SF,107,4148,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,10,0.04,0.06,0.00,0.00,0.89,0.00,0.01,0.20,normal 0,tcp,smtp,SF,1278,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,158,129,0.49,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 31461,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,13,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,42,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,242,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,243,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,16,0.00,0.00,0.00,0.00,1.00,0.00,0.38,5,255,1.00,0.00,0.20,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,134,0.00,0.00,0.00,0.00,0.93,0.01,0.00,255,202,0.79,0.03,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,8,0.00,0.00,0.00,0.00,0.24,0.09,0.00,255,11,0.04,0.91,0.09,0.00,0.13,0.00,0.78,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,1.00,1.00,0.00,0.00,0.33,0.33,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,351,7886,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,2911,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,80,0.22,0.03,0.22,0.03,0.00,0.00,0.00,0.00,normal 2910,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,2,0.01,0.55,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,1,0.03,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,86,0.34,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,178,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,178,0.70,0.01,0.70,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,45,0.00,0.00,0.00,0.00,0.62,0.06,0.00,255,109,0.43,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,206,1.00,0.00,1.00,0.19,0.00,0.00,1.00,1.00,normal 0,tcp,smtp,SF,1739,402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,27,96,0.89,0.15,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.22,0.00,0.00,0.57,0.99,normal 0,tcp,http,SF,211,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,174,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S1,147,16060,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,1.00,0.33,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.06,1.00,0.01,0.00,0.00,normal 3,tcp,smtp,SF,2255,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,161,0.58,0.09,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,1.00,1.00,0.00,0.00,0.25,0.50,0.00,255,61,0.24,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,4,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,8064,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,2352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,1156,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,20,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,25,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.23,0.00,0.76,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.18,0.00,0.79,1.00,anomaly 0,tcp,http,SF,333,185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,43,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,222,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,4,91,1.00,0.00,0.25,0.22,0.00,0.00,1.00,1.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,13,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.03,0.23,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,18,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,326,188,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,45,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,447,447,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,280,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,345,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,43,0.00,0.00,0.00,0.00,1.00,0.00,0.05,84,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,12566,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,14,1.00,0.00,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,9,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.95,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,310,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,2276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,159,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,20,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,221,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,230,0.90,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,8936,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,6,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,125,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,2914,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,265,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,101,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,3,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,3,0.01,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,143,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,68,0.00,0.00,0.00,0.00,0.99,0.03,0.00,255,168,0.66,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,84,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,11,0.00,0.00,1.00,1.00,0.08,0.06,0.00,164,11,0.07,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,11,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,RSTO,126,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,13,13,1.00,0.00,0.08,0.00,0.08,0.08,0.92,0.92,anomaly 20,tcp,smtp,SF,904,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,184,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,171,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,193,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,1585,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,36,0.14,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,282,821,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,4,255,1.00,0.00,0.25,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,17,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,6,0.02,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,222,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,250,13,0.05,0.02,0.00,0.00,0.00,0.00,0.04,0.08,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10656,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.63,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,278,1141,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,15,1.00,0.00,0.50,0.27,0.00,0.07,0.00,0.00,normal 0,tcp,http,SF,493,9142,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,1930,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,188,198,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 7,tcp,smtp,SF,1030,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,201,0.90,0.20,0.10,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,1721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,174,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,801,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.67,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,5612,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,6946,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,255,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,566,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,76,0.00,0.00,0.00,0.00,1.00,0.00,0.03,89,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,6,24,0.83,0.33,1.00,0.12,0.00,0.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,6627,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,15544,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,21,1.00,1.00,0.00,0.00,0.15,0.04,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,673,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,188,237,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,13,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,136,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,26,2,0.04,1.00,0.04,1.00,0.00,0.00,0.85,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,11,1.00,1.00,0.00,0.00,0.12,0.06,0.00,148,11,0.07,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,210,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,789,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,215,154,0.60,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,3,1.00,1.00,0.00,0.00,0.11,0.19,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 17,tcp,smtp,SF,1933,411,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,57,0.68,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,938,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,21,148,0.57,0.24,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,3467,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 21123,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.64,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,286,381,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,3550,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,8,1.00,1.00,0.00,0.00,0.24,0.12,0.00,255,63,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,4330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,23,1.00,1.00,0.00,0.00,0.21,0.04,0.00,255,23,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,195,737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,99,0.39,0.02,0.39,0.00,0.03,0.00,0.02,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,620,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,114,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 11,tcp,smtp,SF,1009,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,122,0.61,0.05,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,smtp,SF,594,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,219,118,0.54,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,7,1.00,1.00,0.00,0.00,0.07,0.07,0.00,150,7,0.05,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,17,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,18,0.00,0.00,1.00,1.00,0.20,0.05,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 2511,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,2,0.03,0.49,0.69,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,13784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,144,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,211,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,8812,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,22,132,0.73,0.14,0.05,0.02,0.00,0.30,0.00,0.00,normal 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,8,0.03,0.05,0.01,0.25,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,3848,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,15,1.00,1.00,0.00,0.00,0.23,0.06,0.00,255,60,0.24,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,63,0.25,0.02,0.01,0.00,0.87,0.95,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,20,1.00,1.00,0.00,0.00,0.27,0.05,0.00,255,72,0.28,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,10,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 42,tcp,auth,RSTO,10,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,3,0.01,0.02,0.00,0.00,0.00,0.00,0.00,0.33,normal 0,tcp,http,SF,231,37654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,1400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,19,101,1.00,0.00,0.05,0.03,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,10,1.00,1.00,0.00,0.00,0.28,0.14,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,250,3589,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,38,0.15,0.18,0.15,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,316,1452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,164,0.00,0.00,0.00,0.00,0.99,0.01,0.00,54,21,0.39,0.04,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,336,1,0.06,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.89,1.00,anomaly 945,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.63,0.95,0.00,0.00,0.00,0.00,0.00,normal 28,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,0.20,0.40,0.25,116,111,0.96,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,220,1,0.00,0.95,0.96,0.00,0.96,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,77,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,77,0.30,0.02,0.30,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,175,1,0.01,0.73,0.73,0.00,0.03,0.00,0.63,1.00,anomaly 0,tcp,ftp_data,SF,14052,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,14,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,191,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,1375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.25,0.00,0.00,1.00,0.00,0.75,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,638,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,20,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,30,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,322,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 2532,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,3,0.01,0.64,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,1,0.00,0.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,274,5894,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,1832,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,22,1.00,1.00,0.00,0.00,0.19,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,6602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,4,1.00,1.00,0.00,0.00,0.11,0.11,0.00,255,48,0.19,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,147,11633,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.77,0.76,0.00,0.00,0.00,0.76,1.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,8,0.80,0.20,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1203,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,240,133,0.55,0.03,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,16,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,2,0.00,0.00,0.00,0.00,0.25,0.25,0.00,255,241,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3235,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,175,183,0.73,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,133,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,133,0.52,0.01,0.52,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,238,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,16,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,57,0.22,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,270,1074,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,286,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,763,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,146,0.55,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,3490,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,14,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 23,tcp,ftp,SF,248,774,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,58,0.27,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,266,15084,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,83,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,19,1.00,1.00,0.00,0.00,0.16,0.04,0.00,255,19,0.07,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,853,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,172,163,0.66,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,188,1291,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.07,0.06,0.00,0.00,1.00,0.00,0.12,15,255,1.00,0.00,0.07,0.03,0.07,0.01,0.00,0.00,normal 0,tcp,http,SF,195,39751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,2491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,70,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,1,15,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,18,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,178,6462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,66,102,1.00,0.00,0.02,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,26,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,261,6961,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,1,0.07,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.88,1.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.22,0.19,0.00,0.00,0.00,0.20,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,156,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.63,0.00,0.00,0.00,0.00,0.59,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,180,2948,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,229,1.00,0.00,0.02,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,212,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,91,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,2006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,10,255,1.00,0.00,0.10,0.07,0.00,0.01,0.00,0.01,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.80,0.00,255,1,0.00,0.60,0.86,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,965,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,48,0.28,0.03,0.28,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,20,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,8073,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,257,570,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.06,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,376,51,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,29,0.00,0.00,0.00,0.00,1.00,0.00,0.10,46,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,245,6312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,104,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,15,0.60,0.08,0.60,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,13,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,192,15,0.08,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,7,0.19,0.05,0.19,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,95,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.62,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,44,0.85,0.04,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,91,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,114,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,27,12,0.44,0.11,0.04,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,1107,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,106,0.46,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,9,1.00,1.00,0.00,0.00,0.45,0.15,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,104,0.41,0.02,0.41,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.33,1.00,0.33,0.67,0.00,255,1,0.00,0.66,0.66,0.00,0.00,0.00,0.66,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,3,0.00,0.00,1.00,1.00,0.03,0.08,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,205,1226,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,23209,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,20,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 29,tcp,smtp,SF,1179,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,71,0.52,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,153,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,8,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,204,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,35,95,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,0.67,0.67,0.25,76,50,0.66,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,78,9,0.12,0.13,0.01,0.00,0.82,1.00,0.01,0.00,anomaly 0,tcp,http,SF,313,5215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,122,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 7631,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.62,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,2551,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1053,340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,170,0.63,0.09,0.01,0.01,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,231,5379,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,2,0.00,0.00,0.00,0.00,0.11,0.17,0.00,255,2,0.01,0.37,0.67,0.00,0.15,0.00,0.18,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,4971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,0.11,42,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,22,7,0.32,0.23,0.05,0.00,0.05,0.00,0.32,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,23,1.00,1.00,0.00,0.00,0.16,0.04,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,12,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 718,tcp,telnet,SF,1412,25260,0,0,0,15,0,1,38,1,0,54,4,1,2,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,95,0.61,0.11,0.61,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 610,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,216,3270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,38,1.00,0.00,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,4,255,1.00,0.00,0.25,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,139,1,0.01,0.93,0.94,0.00,0.94,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,22,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,22,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,76,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,135,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,15,1.00,1.00,0.00,0.00,0.32,0.09,0.00,255,63,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,23,1.00,0.00,1.00,0.35,0.00,0.00,1.00,1.00,normal 0,tcp,smtp,SF,1062,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,150,0.55,0.05,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,23436,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,1116,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,105,63,0.60,0.05,0.01,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,176,4165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,2006,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,141,0.55,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 35,tcp,ftp,SF,1496,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,12,1.00,1.00,0.00,0.00,0.24,0.08,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1216,3380,0,0,0,24,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,70,0.27,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,7,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,7,0.03,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,249,3198,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,37,0.00,0.00,0.00,0.00,1.00,0.00,0.08,95,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,1645,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.01,0.00,0.00,0.47,0.03,normal 0,tcp,http,SF,221,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,118,1.00,0.00,0.01,0.00,0.00,0.00,0.04,0.04,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,207,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,288,1647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,683,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,39,0.15,0.02,0.00,0.00,0.79,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.53,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,244,7207,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,363,492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,11,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,9,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,756,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,34,0.00,0.00,0.00,0.00,1.00,0.00,0.15,149,254,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,303,1337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,19,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,309,32099,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,12211,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,153,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,296,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,37,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.95,0.05,0.00,0.13,0.00,0.82,0.00,anomaly 6,tcp,smtp,SF,2846,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,141,0.55,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,1,0.00,0.00,0.00,0.00,0.11,0.33,0.00,255,5,0.02,0.01,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,58,1.00,0.00,0.33,0.14,0.00,0.00,1.00,1.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,476,1,0.07,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,http,SF,316,7332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,3011,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,112,1.00,0.00,0.08,0.13,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,24,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,4104,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.10,0.00,0.00,0.02,0.70,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,23,0.09,0.25,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,kshell,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.67,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,237,607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,276,1725,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,765,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,237,602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,48,48,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,82,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,298,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,244,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,115,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,325,186,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,12596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,714,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,60,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 6,tcp,telnet,SF,103,1026,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,187,1,0.01,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,9284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.67,0.75,1.00,0.00,0.50,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,8,1.00,1.00,0.00,0.00,0.23,0.11,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,4,1.00,1.00,0.00,0.00,0.06,0.09,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,24,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,8,1.00,1.00,0.00,0.00,0.18,0.09,0.00,255,62,0.24,0.03,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,344,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,11,254,1.00,0.00,0.09,0.19,0.00,0.00,1.00,1.00,normal 29053,tcp,IRC,RSTR,3848,6335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,5,0.00,0.00,0.33,0.80,0.42,0.17,0.00,147,25,0.17,0.02,0.01,0.00,0.00,0.00,0.12,0.72,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6707,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.63,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,76,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,141,0.78,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,156,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,1761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1162,341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,190,167,0.57,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,10554,922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,13,7,0.54,0.15,0.54,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,300,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.03,0.25,0.01,0.00,0.00,normal 0,tcp,smtp,SF,1495,521,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,1,0.00,0.01,0.00,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,10,1.00,1.00,0.00,0.00,0.45,0.18,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,3410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,36,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.16,0.00,0.00,1.00,1.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,539,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,72,0.00,0.00,0.00,0.00,1.00,0.00,0.04,119,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,11,0.34,0.06,0.34,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,976,339,0,0,0,0,0,1,0,0,0,0,2,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,212,177,0.71,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,1,0.06,0.00,0.00,0.00,0.06,0.41,0.00,176,1,0.01,0.06,0.21,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.16,0.00,0.00,1.00,0.73,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,20,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,17,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,200,3119,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,5,1.00,1.00,0.00,0.00,0.45,0.27,0.00,255,19,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,1046,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,101,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,381,6418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,70,2,0.01,1.00,0.01,1.00,0.00,0.00,0.96,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,44,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,44,0.17,0.02,0.17,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,331,1694,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,67,0.00,0.00,0.00,0.00,1.00,0.00,0.06,51,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,3,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,145,4788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,91,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.01,normal 1,tcp,http,SF,290,394,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,9,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,1949,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,13,0.00,0.08,0.00,0.08,1.00,0.00,0.23,163,255,1.00,0.00,0.01,0.02,0.00,0.01,0.01,0.01,normal 0,tcp,smtp,SF,885,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,111,0.44,0.04,0.00,0.00,0.13,0.00,0.02,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,95,0.54,0.03,0.54,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,457,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,33,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,285,10993,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,1875,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,1718,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 804,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.65,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,485,485,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,249,484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,765,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,720,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,19,1.00,1.00,0.00,0.00,0.21,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,239,580,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,19,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,16978,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,833,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,108,183,0.69,0.04,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,189,5360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,40,255,1.00,0.00,0.03,0.01,0.00,0.00,0.03,0.01,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,12,1.00,1.00,0.00,0.00,0.32,0.08,0.00,255,61,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,25,1.00,1.00,0.00,0.00,0.18,0.04,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,20,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,273,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2140,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,87,170,0.71,0.03,0.01,0.02,0.00,0.03,0.00,0.01,normal 0,tcp,http,SF,221,1912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 1,tcp,smtp,SF,1068,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,17,185,0.82,0.18,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,114,0.45,0.19,0.45,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,337,703,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,22,0.09,0.02,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,27,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,244,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,1,0,0,0,5,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,84,0.15,0.15,0.15,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,109,409,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,85,17,0.20,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 98,tcp,telnet,SF,621,8356,0,0,1,1,0,1,5,1,0,14,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,312,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,9,0.00,0.00,0.00,0.33,1.00,0.00,0.44,84,75,0.89,0.02,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,322,997,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,131,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,250,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,244,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,2,1.00,1.00,0.00,0.00,0.09,0.09,0.00,255,2,0.01,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,1893,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,937,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,278,934,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,218,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,42780,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,123,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,303,302,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,72,0.05,0.10,0.05,0.03,0.00,0.00,0.02,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,28,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,12,0.14,0.05,0.14,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,234,10184,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,119,0.83,0.01,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,927,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,98,0.90,0.14,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,185,1.00,0.00,1.00,0.21,0.00,0.00,1.00,0.90,normal 0,tcp,http,SF,286,4673,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,31,0.00,0.00,0.00,0.00,1.00,0.00,0.10,68,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,6,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,181,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,223,554,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,75,1.00,0.00,0.03,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,289,12602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,1668,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,3,6,1.00,0.00,0.33,0.33,0.00,0.33,0.00,0.17,normal 0,tcp,http,SF,148,2956,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,268,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1556,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,129,0.51,0.02,0.51,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,879,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,207,0.81,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,344,1396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,3,1.00,1.00,0.00,0.00,0.18,0.24,0.00,255,49,0.19,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,8,1.00,1.00,0.00,0.00,0.27,0.13,0.00,255,44,0.17,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,140,8,0.06,0.04,0.06,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1388,327,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,168,0.61,0.19,0.01,0.01,0.04,0.01,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,299,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,1.00,1.00,0.00,0.00,0.50,0.75,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,3473,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,16,0.14,0.06,0.00,0.00,1.00,0.00,0.19,170,255,1.00,0.00,0.01,0.01,0.01,0.00,0.01,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,1.00,1.00,0.00,0.00,1.00,0.00,0.00,101,61,0.60,0.02,0.01,0.00,0.98,0.97,0.00,0.00,anomaly 0,tcp,rje,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,323,771,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,216,2317,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,3,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,126,43,0.22,0.03,0.22,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,3792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,156,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,1,0.00,0.00,0.00,0.00,0.04,0.35,0.00,255,1,0.00,0.27,0.79,0.00,0.00,0.00,0.18,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,120,0.47,0.01,0.47,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,13,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,14,0.00,0.00,1.00,1.00,0.19,0.07,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1304,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,138,0.69,0.12,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,225,0.88,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,8,255,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,2747,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,0.19,127,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,16,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,16,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,3669,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,139,0.83,0.17,0.06,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,296,11753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,921,390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,26,0.10,0.07,0.00,0.00,0.81,0.00,0.01,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,14,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,298,5989,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,13,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,331,1187,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S1,702,305,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.50,1.00,0.00,0.00,0.50,1.00,0.00,87,147,0.60,0.07,0.01,0.01,0.05,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,3,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,3226,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,23,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,10,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,10,0.04,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,821,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.66,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,1344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.15,0.00,0.85,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.90,1.00,anomaly 0,tcp,http,SF,215,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,282,8171,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,170,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,370,2868,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,32,0.00,0.00,0.00,0.00,1.00,0.00,0.12,123,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,S3,2194620,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,61,0.24,0.02,0.07,0.00,0.61,0.66,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.17,0.29,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.00,0.00,0.12,0.25,0.00,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,2,0.00,0.00,1.00,1.00,0.11,0.50,0.00,188,2,0.01,0.06,0.10,0.00,0.01,0.00,0.36,1.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,2,255,1.00,0.00,1.00,0.05,0.50,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,23,1.00,0.00,1.00,0.13,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,217,1308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1424,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,44,0.81,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 31,tcp,ftp,SF,1000,3074,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,42,0.22,0.04,0.01,0.00,0.00,0.00,0.01,0.02,normal 0,tcp,http,SF,322,258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,1130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1412,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,197,107,0.54,0.04,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,11,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1710,375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,125,0.34,0.39,0.01,0.02,0.00,0.00,0.31,0.00,anomaly 0,tcp,smtp,SF,107,408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,81,13,0.16,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,IRC,S1,43580,46746,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,45,6,0.13,0.04,0.02,0.00,0.09,0.67,0.00,0.00,normal 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,5,1.00,1.00,0.00,0.00,0.56,0.33,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,190,29363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,856,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,102,0.41,0.03,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,181,10333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.33,0.40,0.00,0.00,1.00,0.00,0.60,116,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,1215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,8,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,2446,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,108,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.67,0.00,255,1,0.00,0.27,0.55,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,23,2,0.09,0.26,0.04,0.00,0.39,1.00,0.04,0.00,anomaly 0,tcp,http,SF,280,2835,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,26,1.00,0.00,1.00,0.08,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,1109,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,86,0.77,0.06,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,10715,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,1.00,1.00,0.00,0.00,0.17,0.50,0.00,255,61,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,30,0.00,0.00,0.00,0.00,1.00,0.00,0.13,78,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,8,1.00,1.00,0.00,0.00,0.30,0.11,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,80,0.87,0.07,0.87,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,162,8448,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,10,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,132,1.00,0.00,0.01,0.00,0.00,0.00,0.02,0.02,anomaly 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,301,0.00,0.00,0.00,0.00,1.00,0.00,0.01,149,110,0.74,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,7,1.00,1.00,0.00,0.00,0.50,0.14,0.00,255,67,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,344,443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,61,251,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 12705,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.77,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,95,6,0.06,0.08,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,238,5120,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,191,934,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,41,0.82,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,18,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,147,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,287,1281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,344,1451,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,86,0.34,0.04,0.34,0.00,0.08,0.00,0.02,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,12,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,1834,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,8936,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.05,0.00,0.00,0.02,0.01,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,229,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,229,0.90,0.01,0.90,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,257,1065,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,110,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,6932,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,59,0.27,0.05,0.22,0.03,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,297,1768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2280318,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,67,89,0.18,0.06,0.18,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,904,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,86,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3995,tcp,X11,SF,491004,68700,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,8,0.17,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,11,1.00,1.00,0.00,0.00,0.28,0.15,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.09,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1020,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,16,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 37912,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,6,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,24,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 29,tcp,ftp,SF,1191,3373,0,0,0,24,0,1,0,0,0,0,0,0,0,0,0,1,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,36,0.14,0.08,0.00,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,69,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,169,0.66,0.34,0.66,0.00,0.09,0.00,0.25,0.00,anomaly 0,tcp,http,SF,229,1005,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,66,0.60,0.00,0.00,0.00,0.40,0.04,0.00,255,66,0.26,0.75,0.26,0.00,0.09,0.00,0.65,0.00,anomaly 0,tcp,http,SF,216,5864,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,210,1.00,0.00,0.07,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,6,1.00,1.00,0.00,0.00,0.03,0.05,0.00,15,6,0.40,0.20,0.07,0.00,0.87,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,70,2,0.03,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,290,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,3766,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.05,0.02,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.16,0.00,0.00,1.00,0.89,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,298,1197,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,200,175,0.88,0.03,0.00,0.00,0.00,0.00,0.88,1.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,20,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,298,3579,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,6,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,16,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,214,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,19134,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,1695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,46,0.18,0.18,0.18,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,299,266,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,157,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,2193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,255,1.00,0.00,0.01,0.05,0.01,0.01,0.01,0.01,normal 0,tcp,http,SF,314,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,23,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1144,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,141,0.55,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 6,tcp,finger,SF,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,8,0.02,1.00,0.02,0.25,0.00,0.00,0.95,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,18,1.00,1.00,0.00,0.00,0.20,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,248,1374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,192,36186,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,179,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,48,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,8,1.00,1.00,0.00,0.00,0.15,0.11,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,477,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,48,0.00,0.00,0.00,0.00,1.00,0.00,0.06,170,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,248,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,37,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,6,24,0.33,0.33,0.33,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,17,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.62,0.62,0.00,0.00,0.00,0.62,1.00,anomaly 0,tcp,http,SF,272,2674,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1035,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,15,251,1.00,0.00,0.07,0.05,0.00,0.00,1.00,1.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,37,0.00,0.00,0.03,0.00,0.97,0.05,0.00,255,37,0.15,0.02,0.15,0.00,0.00,0.00,0.65,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,196,1,0.01,0.50,0.50,0.00,0.00,0.00,0.49,1.00,anomaly 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,30,0.12,0.06,0.12,0.07,0.00,0.00,0.03,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,1,0.00,0.00,0.00,0.00,0.11,0.22,0.00,255,16,0.06,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,131,14,0.11,0.08,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,7003,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.33,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,17,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,3207,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,17,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,265,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,11,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,277,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,152,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,671,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.05,0.05,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,8502,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1184,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,36,0.14,0.53,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,17,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,51,0.20,0.04,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,144,9534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,155,0.80,0.40,0.80,0.01,0.20,0.00,0.00,0.00,anomaly 2,tcp,ftp,SF,1227,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,60,0.24,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 7,tcp,telnet,SF,103,999,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,2,0.01,0.03,0.01,1.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,14,0.00,0.00,1.00,1.00,0.14,0.08,0.00,255,2,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,138,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,168,1674,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,11,0.50,0.09,0.00,0.00,1.00,0.00,0.18,2,9,1.00,0.00,0.50,0.33,0.50,0.11,0.00,0.00,normal 0,tcp,http,SF,291,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,20,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,255,1249,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,81,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,2224,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,27,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,13,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,2,0.00,0.00,0.00,0.00,0.05,0.11,0.00,255,2,0.01,0.67,0.36,0.00,0.16,0.00,0.49,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,195,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.09,0.40,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,SF,6,269,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,2,0.01,0.02,0.00,0.00,0.00,0.00,0.83,0.00,normal 0,tcp,http,SF,306,1157,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,26,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,1.00,1.00,0.00,0.00,1.00,0.00,0.00,53,33,0.62,0.04,0.02,0.00,0.96,0.94,0.00,0.00,anomaly 0,tcp,http,SF,309,757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 2629,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.84,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.04,0.00,0.96,1.00,0.00,0.99,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,http,SF,220,1963,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,18,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,2289,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,126,0.36,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,24,0.00,0.00,0.00,0.00,1.00,0.00,0.21,53,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,1588,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,9,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,148,4,0.03,0.04,0.01,0.00,0.01,0.25,0.05,0.00,normal 0,tcp,http,SF,285,18555,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,79,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,193,767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,19,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,19,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,340,780,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,185,1,0.01,0.12,0.09,0.00,0.00,0.00,0.10,1.00,anomaly 0,udp,domain_u,SF,29,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,213,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1339,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,71,0.28,0.02,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,862,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,73,0.44,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,6,99,0.50,0.67,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,1688,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 5,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,137,1,0.01,0.29,0.28,0.00,0.00,0.00,0.28,1.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,64,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1201,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,201,0.74,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,1,0.11,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.10,0.00,0.84,1.00,anomaly 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,1.00,1.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,2,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,9457,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,12,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,637,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,247,0.97,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,8,1.00,1.00,0.00,0.00,0.73,0.18,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,11,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,13,1.00,1.00,0.00,0.00,0.34,0.11,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,9185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,88,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,286,8188,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,202,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,202,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,22,0.00,0.00,0.00,0.00,0.92,0.08,0.00,255,25,0.10,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 13678,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 1530,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.63,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,4675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,126,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,12,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 542,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.65,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,6,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,1177,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,20,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,67,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,235,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,12598,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.01,0.00,0.00,normal 1125,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.64,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,27,251,1.00,0.00,0.04,0.08,0.00,0.00,0.96,0.74,normal 0,tcp,http,SF,196,14123,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 11481,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,1,0.01,0.72,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,724,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,36,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,126,1,0.01,0.23,0.22,0.00,0.00,0.00,0.21,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,2664,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,52,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6163,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.64,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,266,2535,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,47,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,8,0.93,1.00,0.07,0.00,0.27,0.13,0.00,255,8,0.03,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,1.00,0.01,0.00,0.99,0.00,0.00,0.00,normal 3,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,323,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,SF,10,38,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,148,7,0.05,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,3662,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 15,tcp,smtp,SF,1362,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,25,0.49,0.08,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,82,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,36,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,358,3781,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,220,715,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,228,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,8230,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,159,347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,39,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,28,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 18438,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1307,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,173,0.79,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,87,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,188,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1447,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,114,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,98,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,341,5468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,26,0.00,0.04,0.00,0.00,1.00,0.00,0.12,23,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.07,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,8,0.50,0.12,0.00,0.12,1.00,0.00,0.25,13,255,1.00,0.00,0.15,0.04,0.08,0.00,0.08,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,201,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,327,1047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,204,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,367,3008,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,12,0.00,0.00,0.00,0.00,0.80,0.13,0.00,255,12,0.05,0.94,0.07,0.00,0.03,0.00,0.90,0.00,anomaly 0,tcp,http,SF,217,1850,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,14,1.00,1.00,0.00,0.00,1.00,0.00,0.00,74,20,0.19,0.05,0.01,0.10,1.00,0.70,0.00,0.00,anomaly 1,tcp,smtp,SF,1643,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,149,0.56,0.03,0.00,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,225,36985,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,60,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,214,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 9375,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,251,4014,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,139,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,15,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,35,0.14,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 13816,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,150,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,20,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,20,0.08,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,320,2280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,44,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,191,0.75,0.02,0.75,0.00,0.00,0.00,0.19,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,45,3,0.07,0.13,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,177,175,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,2563,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,31,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5929,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,54,0.71,0.04,0.71,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,323,270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,3008,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,2322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,187,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,21,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,6,0.03,0.05,0.03,0.00,0.02,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,41,41,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,200,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,345,545,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,24716,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.12,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.19,0.00,0.81,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,4,1.00,1.00,0.00,0.00,0.11,0.11,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,11070,922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,icmp,eco_i,SF,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,2,0.02,0.06,0.02,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,1863,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,40,0.16,0.02,0.00,0.00,0.53,0.85,0.00,0.00,normal 0,tcp,ftp_data,SF,7422,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,97,0.58,0.04,0.58,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,17,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,109,0.81,0.03,0.81,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1470,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,80,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,149,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,737,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.95,0.00,0.00,1.00,0.00,0.10,163,86,0.53,0.04,0.01,0.00,0.01,0.01,0.00,0.00,normal 36131,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,18,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2292,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,192,0.75,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.20,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,http,SF,230,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,34,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 639,tcp,telnet,SF,584,19887,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.62,0.00,0.00,0.62,0.15,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,24,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,56,0.75,0.50,0.75,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,48,0.00,0.00,0.00,0.00,1.00,0.00,0.04,213,242,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,1491,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,51,0.20,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,11,0.00,0.00,0.00,0.00,0.39,0.11,0.00,255,11,0.04,0.70,0.32,0.00,0.16,0.00,0.52,0.00,anomaly 0,tcp,http,SF,273,5011,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,14,250,1.00,0.00,0.07,0.16,0.00,0.00,1.00,1.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,25,1.00,0.00,1.00,0.08,0.00,0.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,13,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,1.00,0.29,1.00,0.00,0.29,11,255,1.00,0.00,0.09,0.22,0.00,0.00,1.00,0.89,normal 0,tcp,http,SF,225,1972,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,33,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,171,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,755,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,91,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,11,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,50,0.19,0.02,0.19,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1129,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,138,1.00,0.00,0.14,0.02,0.00,0.04,0.00,0.01,normal 1,tcp,smtp,SF,661,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,129,0.80,0.40,0.20,0.02,0.00,0.00,0.00,0.00,normal 9219,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,171,3,0.02,0.62,0.92,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,191,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,15,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.55,0.50,0.00,0.02,0.00,0.51,1.00,anomaly 0,tcp,http,SF,0,13246,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.17,0.01,0.00,0.00,normal 0,tcp,smtp,SF,1323,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,209,151,0.62,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,640,340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,151,0.59,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,317,515,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,38,0.00,0.00,0.03,0.00,0.97,0.05,0.00,255,38,0.15,0.02,0.15,0.00,0.00,0.00,0.65,0.00,anomaly 0,tcp,ftp_data,SF,1109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,225,39,0.12,0.02,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,191,0.00,0.00,0.00,0.00,0.99,0.01,0.00,81,48,0.59,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,182,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,154,0.60,0.17,0.60,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,3270,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,152,0.62,0.19,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,768,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,155,0.61,0.03,0.62,0.00,0.00,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,482,482,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,107,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,597,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 21927,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,8,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1203,405,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,174,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,206,0.81,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,275,604,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,0.11,11,255,1.00,0.00,0.09,0.05,0.09,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,19,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,1182,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,21,3,0.14,0.19,0.05,0.00,0.10,0.67,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,254,1,0.00,0.13,0.10,0.00,0.00,0.00,0.11,1.00,anomaly 0,udp,domain_u,SF,43,85,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,166,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,21,0.19,0.06,0.19,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,159,1960,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,149,0.58,0.02,0.58,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,3775,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,1,0.05,0.00,0.00,0.00,0.05,0.38,0.00,239,1,0.00,0.05,0.37,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,243,2595,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.02,0.03,0.00,0.00,0.00,normal 0,tcp,http,SF,326,2238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.03,0.05,0.01,0.00,0.00,normal 0,tcp,http,SF,300,891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,1130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,170,24161,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,37,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,1,1.00,1.00,0.00,0.00,0.01,0.09,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,124,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,209,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,17844,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,119,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,2553,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,62,255,1.00,0.00,0.02,0.01,0.00,0.00,0.02,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,19,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5290,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,2,1.00,1.00,0.00,0.00,0.05,0.16,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1436,419,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,224,137,0.61,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,172,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,64,0.17,0.03,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,1600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,47,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5036,tcp,ftp_data,SF,5133876,0,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,43,0.91,0.18,1.00,0.12,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,230,1718,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,346,3477,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,1212,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3468,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,99,0.62,0.02,0.62,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,859,404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,85,190,0.87,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,5,0.00,0.00,0.00,0.00,0.83,0.33,0.00,255,29,0.11,0.01,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1006,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,184,181,0.67,0.03,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,16,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,9198,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,43,0.33,0.04,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,9,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 31,tcp,ftp,SF,242,773,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,3,0.33,0.22,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,0.28,180,29,0.12,0.03,0.12,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,115,1.00,0.00,0.01,0.00,0.00,0.00,0.02,0.02,anomaly 0,udp,domain_u,SF,46,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,153,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,125,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,4,0.00,0.00,0.00,0.00,0.20,0.15,0.00,255,4,0.02,0.52,0.51,0.00,0.16,0.00,0.33,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,20,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.07,0.07,0.00,0.00,1.00,0.00,0.00,244,74,0.30,0.03,0.32,0.00,0.02,0.04,0.00,0.00,normal 0,tcp,pop_3,SF,38,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,143,7,0.04,0.05,0.01,0.29,0.01,0.00,0.01,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,12,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,14,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1499,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,42,0.16,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,11,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 11371,tcp,telnet,SF,127,4015,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,3,0.13,0.09,0.04,0.00,0.04,0.33,0.00,0.00,normal 0,tcp,finger,SF,8,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,9,0.04,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,91,0.37,0.07,0.37,0.02,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,216,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,20,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,370,468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,1718,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,223,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,395,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,100,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,77,0.00,0.00,0.00,0.00,1.00,0.00,0.00,149,77,0.52,0.03,0.52,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,75,2,0.03,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,20526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,854,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,103,0.37,0.07,0.37,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,314,2628,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,1433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,177,215,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,14,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,172,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.05,0.18,0.00,0.40,0.00,0.02,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,25,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1769,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,167,0.63,0.03,0.00,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,3676,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,25,0.17,0.10,0.17,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12774,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.52,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,46,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,121,0.66,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,12,0.00,0.00,1.00,1.00,0.10,0.07,0.00,90,12,0.13,0.09,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,74,68,0.92,0.04,0.01,0.00,0.00,0.00,0.92,1.00,normal 0,tcp,http,SF,196,14141,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,18,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,28,201,1.00,0.00,0.04,0.18,0.00,0.00,1.00,0.99,normal 0,tcp,http,SF,307,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,190,244,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,auth,SF,14,41,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,11,0.05,0.03,0.00,0.18,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,182,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,25,0.00,0.08,0.00,0.04,1.00,0.00,0.32,46,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,833,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,164,0.72,0.06,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,8,0.00,0.00,0.00,0.00,0.89,0.22,0.00,255,8,0.03,0.59,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,468,468,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,18,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 13663,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.63,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,13,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7940,0,0,0,0,0,0,1,0,0,0,0,2,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,76,0.54,0.05,0.54,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,20,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.80,0.79,0.00,0.00,0.00,0.79,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,5,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,283,6614,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,69,1.00,0.00,0.50,0.23,0.00,0.00,1.00,1.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.02,0.00,0.97,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.02,0.00,0.97,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,19,1.00,1.00,0.00,0.00,0.61,0.06,0.00,39,46,0.49,0.05,0.03,0.04,1.00,0.41,0.00,0.00,anomaly 0,tcp,smtp,SF,2143,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,193,0.77,0.06,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,OTH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,185,1,0.01,0.74,0.74,0.00,0.03,0.00,0.63,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,18,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,21,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,145,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,2771,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,38,0.30,0.09,0.30,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,63,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,6,255,1.00,0.00,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,112,0.44,0.05,0.47,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,339,272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,182,14650,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,73,1,0.01,0.86,0.89,0.00,0.89,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,94,0.01,0.00,0.01,0.00,0.98,0.03,0.00,255,94,0.37,0.02,0.37,0.00,0.00,0.00,0.47,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,33,0.00,0.00,0.00,0.00,0.55,0.07,0.00,255,98,0.38,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,123,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,124,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,1,0.25,0.50,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,32,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,70,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,17,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,185,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,25,1.00,1.00,0.00,0.00,0.26,0.04,0.00,255,25,0.10,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1401,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,193,0.82,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 14380,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,215,12008,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.33,0.00,0.00,1.00,0.99,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,32,247,1.00,0.00,0.03,0.06,0.00,0.00,1.00,0.55,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,884,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,61,0.24,0.03,0.24,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1316,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,181,0.60,0.40,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,43,253,1.00,0.00,0.02,0.08,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,230,505,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,2226,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,48,0.00,0.02,0.00,0.02,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,876,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,0.50,1.00,1.00,154,136,0.46,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,1971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,45,47,0.00,0.00,0.00,0.00,1.00,0.00,0.06,113,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.11,0.00,0.00,1.00,0.53,normal 0,tcp,http,SF,305,726,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,230,0.90,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,13,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,106,1,0.01,0.11,0.08,0.00,0.00,0.00,0.07,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,10,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,279,2518,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,24,239,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,1,0.08,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.87,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,248,11732,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,7,1.00,1.00,0.00,0.00,0.44,0.19,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,219,219,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,2011,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,58,0.94,0.03,0.02,0.00,0.00,0.00,0.00,0.00,normal 7580,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.68,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,4,0.02,0.76,0.02,0.00,0.03,0.00,0.62,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,350,350,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,15,1.00,0.00,0.50,0.60,0.00,0.07,1.00,0.87,normal 0,tcp,http,SF,382,1864,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,46,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2693,473,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,8,1.00,1.00,0.00,0.00,0.17,0.12,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,25,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,33988,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,86,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,237,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,26,0.10,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,265,1533,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,146,20006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.06,0.00,0.01,0.00,0.01,normal 0,tcp,http,SF,333,5369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 255,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.68,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,11,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,4,255,1.00,0.00,0.25,0.15,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,280,12913,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,35,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,199,17,0.09,0.03,0.09,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,2446,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,39,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,25519,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,137,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,7412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.01,0.00,0.01,0.00,0.00,normal 27,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,235,1202,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.01,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,200,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,33,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2115,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.48,0.69,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,288,0.00,0.00,0.00,0.00,1.00,0.01,0.01,213,174,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,14,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.81,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,19,0.07,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,20,1.00,1.00,0.00,0.00,0.19,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 263,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.64,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.38,0.36,0.00,0.00,0.00,0.36,1.00,anomaly 0,tcp,http,SF,205,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1458,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,189,156,0.68,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,2627,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.08,0.00,0.01,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,5,1.00,1.00,0.00,0.00,0.38,0.23,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.62,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,1976,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,23,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,6,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,966,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,250,264,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,261,3913,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,92,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,29,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,249,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.16,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,202,4841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,255,1.00,0.00,0.01,0.04,0.01,0.01,0.00,0.01,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,870,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,16,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,1158,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,6,1.00,1.00,0.00,0.00,0.35,0.29,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,1,0.00,0.00,0.00,0.00,0.08,0.17,0.00,255,46,0.18,0.39,0.65,0.00,0.16,0.00,0.20,0.00,anomaly 0,tcp,http,SF,303,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,3622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,2097,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,2,255,1.00,0.00,0.50,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,263,1609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 8649,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,3,0.01,0.49,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,158,26866,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.25,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.71,0.71,1.00,0.00,0.00,10,163,1.00,0.00,0.10,0.23,0.00,0.00,0.80,0.99,normal 0,tcp,http,SF,253,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,48,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,25,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.50,0.20,0.00,0.00,1.00,0.00,0.40,2,255,1.00,0.00,1.00,0.04,0.50,0.00,0.00,0.00,normal 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,5,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,243,1973,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,479,9142,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,26,0.10,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,6,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,510,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,684,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,225,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 4629,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.82,1.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2348,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,122,0.48,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,235,3913,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,33,255,1.00,0.00,0.03,0.08,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,266,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,222,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,7,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,3,0.59,1.00,0.00,0.00,0.02,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,19,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,88382,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,199,77,0.36,0.03,0.36,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,705,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,109,184,0.72,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S1,82,206,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,119,202,0.83,0.03,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,455,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,189,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,192,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,229,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,87,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,4,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,2137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,23,0.00,0.00,0.06,0.04,1.00,0.00,0.09,51,255,1.00,0.00,0.02,0.01,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,265,2862,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,52,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,16,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,8,1.00,1.00,0.00,0.00,0.07,0.08,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,28,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,35,7,0.20,0.17,0.03,0.00,0.60,1.00,0.03,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,333,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,89,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2472,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,153,0.77,0.12,0.04,0.01,0.00,0.01,0.00,0.00,normal 2099,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.52,0.85,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,2483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.12,0.12,0.00,0.00,1.00,0.00,0.00,70,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,257,2555,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,186,0.73,0.16,0.73,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,331,9207,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,85,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,18,1.00,1.00,0.00,0.00,0.28,0.06,0.00,255,58,0.23,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 16,tcp,smtp,SF,1359,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,43,176,0.74,0.09,0.02,0.01,0.00,0.00,0.00,0.01,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,108,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,15,255,1.00,0.00,0.07,0.22,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,209,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,20,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,16,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,285,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.47,0.44,0.00,0.00,0.00,0.45,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,25,1.00,1.00,0.00,0.00,0.08,0.04,0.00,156,25,0.16,0.06,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,73,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,124,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.24,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,172,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 13564,tcp,IRC,RSTR,3089,9102,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,129,16,0.12,0.02,0.01,0.00,0.00,0.00,0.09,0.69,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,1,0.00,0.00,0.00,0.00,0.09,0.73,0.00,255,1,0.00,0.13,0.36,0.00,0.00,0.00,0.56,0.00,anomaly 0,tcp,http,SF,247,1910,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,6,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.07,0.00,0.00,0.67,0.00,0.01,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,328,24786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,15,0.00,0.00,0.00,0.00,0.52,0.10,0.00,255,15,0.06,0.75,0.27,0.00,0.16,0.00,0.57,0.00,anomaly 0,tcp,http,SF,254,2005,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,212,255,1.00,0.00,0.00,0.02,0.01,0.01,0.08,0.08,normal 0,tcp,other,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.62,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,7,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2448,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.65,0.86,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,142,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,2066,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,1.00,0.33,0.00,0.00,1.00,0.00,1.00,84,148,0.82,0.04,0.01,0.01,0.02,0.01,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,30,0.12,0.01,0.12,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,78,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,299,5357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,2,0.40,0.40,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8173,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,21,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,1737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,19,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,176,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,41,0.17,0.05,0.17,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,8737,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,17,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,219,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,235,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,0.16,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.58,0.58,0.00,0.00,0.00,0.58,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,18,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,18,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,177,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 31,tcp,ftp,SF,1528,4152,0,0,0,25,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,42,0.16,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,185,383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.03,0.00,0.01,0.00,0.02,normal 0,tcp,http,SF,234,510,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,27,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,338,1040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.06,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,44,118,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,114,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,174,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,165,175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,20,1.00,1.00,0.00,0.00,0.36,0.07,0.00,255,40,0.16,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,12,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,220,1.00,0.00,0.20,0.14,0.00,0.00,1.00,0.97,normal 0,tcp,pop_3,SF,38,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,8,0.05,0.06,0.01,0.25,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,1246,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,3,1.00,1.00,0.00,0.00,0.13,0.09,0.00,255,3,0.01,0.07,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,141,0.55,0.02,0.55,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,212,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,4,0.00,0.00,1.00,1.00,0.04,0.08,0.00,81,4,0.05,0.10,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,333,523,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,37,183,1.00,0.00,0.03,0.09,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,28,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.21,0.00,0.79,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.24,0.00,0.76,1.00,anomaly 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,5,0.03,0.04,0.01,0.40,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,81,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,22,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,50,0.00,0.00,0.00,0.00,1.00,0.00,0.00,253,50,0.20,0.04,0.20,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,SF,310,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,53,41,0.77,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,727,340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,193,0.70,0.06,0.01,0.01,0.01,0.00,0.01,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,11,1.00,0.91,0.00,0.00,0.04,0.07,0.18,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.10,0.12,0.10,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 887,tcp,telnet,SF,745,22757,0,0,0,0,0,1,5,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,27,0.11,0.06,0.00,0.00,0.73,0.56,0.01,0.11,normal 0,tcp,http,SF,304,420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1296,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,35052,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,52,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,374,471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,32,0.00,0.00,0.00,0.00,1.00,0.00,0.12,38,231,1.00,0.00,0.03,0.21,0.00,0.00,0.08,0.77,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,110,0.00,0.00,0.00,0.00,0.99,0.02,0.03,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,249,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,218,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,11,11,1.00,0.00,0.09,0.00,0.09,0.09,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,6,1.00,1.00,0.00,0.00,0.55,0.18,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,8,1.00,1.00,0.00,0.00,0.31,0.19,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,212,2120,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1537,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,23,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,288,1745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,150,23476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,250,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.14,0.00,0.86,1.00,anomaly 0,tcp,http,SF,277,841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,43,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,1172,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,43,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 59,tcp,telnet,SF,127,18127,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,193,1,0.01,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,4,0.00,0.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,7,0.99,1.00,0.00,0.00,0.07,0.08,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,186,11,0.06,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,207,18,0.09,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,9091,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,100,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,285,6356,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,1,0.00,0.00,0.95,1.00,0.05,1.00,0.00,137,1,0.01,0.24,0.01,0.00,0.00,0.00,0.15,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,330,2566,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,141,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,40,444,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.33,0.00,0.17,1.00,0.00,166,1,0.01,0.10,0.01,0.00,0.01,0.00,0.02,0.00,anomaly 0,tcp,http,SF,224,1808,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.23,0.00,0.00,0.17,0.89,normal 0,tcp,http,SF,323,598,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,143,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,309,1942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,68,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,17,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,93,0.39,0.05,0.39,0.02,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,273,0.00,0.00,0.00,0.00,1.00,0.00,0.01,116,200,0.87,0.02,0.87,0.01,0.00,0.00,0.09,0.00,normal 0,tcp,http,SF,287,870,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,11,0.14,0.06,0.18,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,67,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,67,0.26,0.01,0.26,0.00,0.00,0.00,0.00,0.00,anomaly 1130,tcp,IRC,RSTR,92,1204,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,68,23,0.34,0.03,0.01,0.00,0.01,0.04,0.26,0.78,normal 0,tcp,http,SF,307,1354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,19,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,35,0.14,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,8,0.00,0.00,1.00,1.00,0.07,0.07,0.00,197,8,0.04,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 2,tcp,smtp,SF,3145,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,88,66,0.64,0.03,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,257,289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,255,1.00,0.00,0.02,0.03,0.00,0.00,0.02,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.09,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,24,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,24,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,17733,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,56,0.00,0.00,0.00,0.00,1.00,0.00,0.05,116,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,123,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,227,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,12,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,27,1.00,0.74,0.00,0.00,0.08,0.06,0.07,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,22150,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,710,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,39,0.00,0.00,0.00,0.00,1.00,0.00,0.05,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,23,1.00,1.00,0.00,0.00,0.21,0.05,0.00,255,23,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,245,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,2,1.00,1.00,0.00,0.00,0.12,0.12,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,15377,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,127,0.51,0.02,0.51,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,320,962,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,26,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,55,0.77,0.05,0.77,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,10,1.00,1.00,0.00,0.00,0.40,0.12,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,414,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,http,SF,374,2638,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,1931,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,212,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,246,12621,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,197,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,10,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,2417,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,25,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,21,17,0.81,0.14,0.05,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,15,0.00,0.00,1.00,1.00,0.06,0.05,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,224,1493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,25,0.00,0.00,0.00,0.00,1.00,0.00,0.12,27,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 1200,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.58,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,255,6,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,16,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,16,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,146,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,1215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,12,0.00,0.00,0.00,0.00,1.00,0.00,0.33,187,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,57,0.50,0.05,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,5790,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,182,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,16787,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,1,0.00,0.00,0.00,0.00,0.09,0.27,0.00,20,1,0.05,0.20,0.85,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,56215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,7522,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,154,0.00,0.00,0.00,0.00,0.97,0.04,0.01,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,128,0.50,0.05,0.50,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,13,1.00,1.00,0.00,0.00,0.43,0.10,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,62,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,816,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,158,0.93,0.13,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,165,14328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,6,96,1.00,0.00,0.17,0.10,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,46,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,141,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,228,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,2165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,212,984,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.95,0.00,0.00,0.00,0.01,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,5,0.02,0.01,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,43,0.17,0.21,0.17,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,14593,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,21,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,6476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,14,255,1.00,0.00,0.07,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,44,0.17,0.09,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,6,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,23,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,23,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,41,0.18,0.06,0.18,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,52,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,236,0.93,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,55,0.22,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1484,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,123,0.45,0.05,0.01,0.02,0.00,0.00,0.01,0.02,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,18,1.00,1.00,0.00,0.00,0.07,0.04,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,6,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,3814,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,278,8596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9,tcp,telnet,SF,103,2822,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,3,0.08,0.25,0.08,1.00,0.00,0.33,0.00,0.00,normal 0,tcp,other,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,1,0.05,0.00,0.00,0.00,0.05,0.38,0.00,58,1,0.02,0.19,0.57,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,8,0.00,0.00,0.00,0.00,0.73,0.18,0.00,255,8,0.03,0.33,0.85,0.00,0.02,0.00,0.13,0.00,anomaly 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,18,0.00,0.00,1.00,1.00,0.07,0.05,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,107,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,21,1.00,1.00,0.00,0.00,0.14,0.04,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,114,1.00,0.00,0.50,0.17,0.00,0.00,1.00,1.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.21,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,20,1.00,1.00,0.00,0.00,0.07,0.04,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 265,udp,domain_u,SF,54,40,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,18,1.00,0.00,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,9,1.00,1.00,0.00,0.00,0.56,0.19,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,8,4,0.50,0.38,0.12,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1722,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,175337,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,110,0.47,0.04,0.47,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,7,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,3,1.00,1.00,0.00,0.00,0.30,0.40,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,151,0.00,0.00,0.00,0.00,0.97,0.04,0.01,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,1749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,10,0.00,0.00,0.00,0.00,0.83,0.25,0.00,255,10,0.04,0.33,0.86,0.00,0.00,0.00,0.14,0.00,anomaly 0,tcp,http,SF,262,680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.25,1.00,0.00,0.75,77,255,1.00,0.00,0.01,0.02,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,102,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 5,tcp,ssh,SF,0,15,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,1,0.33,1.00,0.33,0.00,0.00,0.00,0.67,0.00,anomaly 0,tcp,http,SF,333,14206,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.05,0.03,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,251,1.00,0.00,1.00,0.05,0.00,0.00,1.00,0.45,normal 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,8,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.08,0.00,0.00,1.00,0.89,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,18,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,18,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,316,3825,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,187,590,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,38,0.00,0.00,0.00,0.00,1.00,0.00,0.08,51,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,9178,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,96,0.38,0.02,0.38,0.00,0.00,0.00,0.02,0.00,normal 778,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.63,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,76,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,148,14506,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,1918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,10707,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,46,2,0.02,1.00,0.02,1.00,0.00,0.00,0.89,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.28,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,20,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,18,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,7,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,250,2577,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.44,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,17,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 40053,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.48,0.96,0.00,0.00,0.00,0.96,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,1,0.99,1.00,0.01,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,205,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,9,1.00,1.00,0.00,0.00,0.21,0.10,0.00,255,23,0.09,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 479,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,7,1.00,0.00,0.33,0.43,0.00,0.00,1.00,1.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,20,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,82,0.01,0.00,0.00,0.00,0.99,0.02,0.00,255,82,0.32,0.01,0.32,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,18,0.00,0.00,1.00,1.00,0.14,0.05,0.00,255,18,0.07,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,8766,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,23,0.09,0.02,0.09,0.00,0.00,0.00,0.76,0.00,normal 0,tcp,http,SF,301,3010,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,92,255,1.00,0.00,0.01,0.01,0.00,0.00,0.02,0.01,normal 0,tcp,http,SF,206,1496,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,ftp,SF,1213,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,132,0.52,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,347,1406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,354,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,170,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,537,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.05,0.02,0.01,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,89,0.01,0.00,0.01,0.00,0.98,0.03,0.00,255,89,0.35,0.02,0.35,0.00,0.00,0.00,0.49,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,350,719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,23,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,50,1.00,0.00,1.00,0.10,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12286,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,54,0.24,0.04,0.24,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,194,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,12,0.00,0.00,0.00,0.00,0.43,0.11,0.00,255,12,0.05,0.62,0.43,0.00,0.05,0.00,0.52,0.00,anomaly 0,udp,domain_u,SF,44,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,196,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,22,1.00,0.00,1.00,0.18,0.00,0.00,0.00,0.00,anomaly 1,tcp,ftp,SF,1276,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,132,0.52,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,208,2181,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,729,379,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,231,0.90,0.10,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,3971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,17,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,9,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,51,0.00,0.00,0.02,0.00,0.98,0.04,0.00,255,51,0.20,0.02,0.20,0.00,0.00,0.00,0.60,0.00,anomaly 0,tcp,http,SF,322,642,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 10264,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.46,0.82,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,135,1,0.01,0.64,0.64,0.00,0.04,0.00,0.63,1.00,anomaly 0,tcp,smtp,SF,852,439,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,210,81,0.29,0.02,0.00,0.02,0.00,0.00,0.01,0.02,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.10,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,367,1699,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,38,0.15,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,24,1.00,1.00,0.00,0.00,0.32,0.07,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,199,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,2316,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,6634,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,32,193,1.00,0.00,0.03,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,167,4,0.02,0.07,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,18,0.97,1.00,0.03,0.00,0.46,0.08,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,1789,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,12,1.00,1.00,0.00,0.00,0.11,0.07,0.00,4,2,0.50,0.75,0.25,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.20,0.20,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,smtp,SF,1123,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,146,0.57,0.04,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1095,371,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,198,166,0.70,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,169,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,14189,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,19,0.38,0.12,0.38,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,9178,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,84,0.35,0.04,0.35,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,1978,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,38,0.00,0.53,0.00,0.00,1.00,0.00,0.08,58,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,93,0.24,0.05,0.24,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,1494,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,19,226,0.47,0.16,0.05,0.01,0.00,0.00,0.11,0.00,normal 0,tcp,http,S1,196,36500,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,148,228,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,auth,SF,10,37,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,1,12,1.00,0.00,1.00,0.17,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,195,1.00,0.00,0.50,0.07,0.00,0.00,1.00,0.99,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,6,253,1.00,0.00,0.17,0.20,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,306,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,236,0.93,0.02,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,312,2607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.16,0.00,0.84,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.05,0.00,0.95,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,424,1,0.06,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,ftp_data,SF,19,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,65,0.58,0.21,0.58,0.03,0.00,0.03,0.00,0.00,normal 0,tcp,http,SF,320,1092,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,174,5916,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,214,663,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,88,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,369,6193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,1040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,1509,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 20,tcp,ftp,SF,234,769,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,29,0.11,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,8,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1185,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.63,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,9,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,9,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,197,1410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,253,1.00,0.00,0.01,0.06,0.00,0.00,0.40,0.52,normal 136,tcp,telnet,SF,188,38126,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,185,1,0.01,0.03,0.01,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,5,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,7,0.00,0.00,1.00,1.00,0.06,0.08,0.00,255,7,0.03,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.54,0.49,0.00,0.04,0.00,0.49,1.00,anomaly 0,tcp,http,SF,228,990,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,74,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,19,0.00,0.00,1.00,1.00,0.39,0.10,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,264,8786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,1205,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,32,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,3,0.73,0.67,0.27,0.33,0.02,0.36,0.00,255,3,0.01,0.18,0.51,0.00,0.37,0.67,0.14,0.33,anomaly 0,tcp,http,SF,223,1816,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.44,5,255,1.00,0.00,0.20,0.06,0.00,0.00,0.00,0.00,normal 12,tcp,smtp,SF,1203,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,167,0.56,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,2674,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,86,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,116,0.00,0.00,0.00,0.00,0.99,0.02,0.03,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,232,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,34,0.13,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,0.00,0.00,0.22,0.00,0.78,0.00,anomaly 0,tcp,ftp_data,SF,554,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,118,0.67,0.67,0.67,0.03,0.00,0.01,0.00,0.00,normal 25,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,6,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,15,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,8,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2078,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,27,169,0.78,0.07,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,183,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,5319,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,32,0.17,0.04,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,246,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,44,1.00,0.00,1.00,0.09,0.00,0.00,0.25,0.02,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,8,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,47,56,1.00,0.00,0.02,0.04,0.00,0.00,0.43,0.52,normal 0,tcp,smtp,SF,5518,471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,122,0.18,0.04,0.01,0.02,0.03,0.00,0.69,0.00,normal 0,tcp,http,SF,250,1155,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,20,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,16115,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,45,0.36,0.02,0.36,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,173,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,2,0.83,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,18,1.00,1.00,0.00,0.00,0.20,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2546,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.02,0.00,0.00,0.98,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.75,30,22,0.73,0.07,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1348,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,0.50,1.00,1.00,69,46,0.67,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,841,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,119,0.53,0.17,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,30,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,151,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,180,101,0.51,0.03,0.51,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,77,0.00,0.00,0.00,0.00,1.00,0.00,0.12,99,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,4,0.00,0.00,0.00,0.00,0.11,0.11,0.00,255,4,0.02,0.07,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,19,1.00,1.00,0.00,0.00,0.79,0.08,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,13,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,747,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,246,129,0.49,0.01,0.00,0.02,0.81,0.78,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,415,235,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,65,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,8,1.00,1.00,0.00,0.00,0.33,0.12,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,2,0.01,0.48,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,74,0.47,0.05,0.47,0.03,0.04,0.00,0.01,0.00,normal 0,tcp,http,SF,281,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,1,255,1.00,0.00,1.00,0.06,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,152,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,12,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,ftp_data,SF,832,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,11,1.00,0.00,1.00,0.18,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,5,0.99,1.00,0.00,0.00,0.05,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,3001,640,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,133,0.52,0.01,0.00,0.00,0.73,0.75,0.00,0.00,normal 0,tcp,http,SF,399,9572,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,1.00,1.00,0.00,0.00,1.00,0.00,0.00,86,46,0.53,0.02,0.01,0.00,0.98,0.96,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,284,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,252,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1072,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,25,0.00,0.04,0.00,0.00,1.00,0.00,0.28,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,9,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,21,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,319,6534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,114,0.00,0.00,0.00,0.00,0.85,0.03,0.00,255,156,0.61,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,19,0.99,1.00,0.00,0.00,0.10,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,20,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,24,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,4137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1726,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,205,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,4097,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,810,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,52,47,0.67,0.12,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,1582,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,6827,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,16,1.00,1.00,0.00,0.00,0.21,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,194,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,50,0.20,0.17,0.20,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,2,0.00,0.00,0.00,0.00,0.29,0.43,0.00,255,2,0.01,0.76,0.27,0.00,0.03,0.00,0.70,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2029,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.66,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,1088,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.07,0.00,0.00,1.00,0.74,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.02,0.94,0.00,0.00,0.00,0.05,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,198,1,0.01,0.51,0.51,0.00,0.00,0.00,0.50,1.00,anomaly 0,tcp,http,SF,283,835,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,20,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,14,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,14,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,165,16129,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,4,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,161,255,1.00,0.00,0.01,0.04,0.00,0.00,0.68,0.62,normal 0,tcp,http,SF,260,737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,212,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,177,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,7,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,173,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,92,0.52,0.00,0.00,0.00,0.48,0.04,0.00,255,92,0.36,0.64,0.36,0.00,0.09,0.00,0.55,0.00,anomaly 0,tcp,http,SF,307,760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,118,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,152,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,137,93,0.68,0.02,0.01,0.00,0.00,0.00,0.68,1.00,normal 0,tcp,http,SF,335,1721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,1.00,1.00,0.00,0.00,0.67,0.67,0.00,255,22,0.09,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,6,0.02,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,182,411,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,758,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,43,190,0.63,0.09,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.27,0.24,0.00,0.00,0.00,0.25,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,5907,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,273,985,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1828,376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,163,0.64,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,189,277,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,5,255,1.00,0.00,0.20,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,31,1.00,0.55,0.00,0.00,0.07,0.07,0.06,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,84,255,1.00,0.00,0.01,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,144,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,22,0.18,0.04,0.18,0.00,0.00,0.00,0.03,0.00,normal 0,udp,domain_u,SF,46,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,55,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 2355,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.57,0.81,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,75,0.40,0.04,0.40,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,1099,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,33,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,20,0.09,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,130,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,88382,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,25,0.10,0.02,0.10,0.00,0.00,0.00,0.76,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,26,0.17,0.03,0.17,0.00,0.00,0.00,0.05,0.00,normal 1,tcp,smtp,SF,2602,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,39,149,0.69,0.08,0.03,0.02,0.03,0.01,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,20,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1447,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,92,0.69,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,461,461,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,20,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.12,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,13,1.00,1.00,0.00,0.00,0.24,0.07,0.00,255,29,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 7,tcp,telnet,SF,104,2328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,6,0.08,0.20,0.04,0.33,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,4009,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.05,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,156,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,327,3200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,347,1366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,8440,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,21,0.00,0.00,0.00,0.00,1.00,0.00,0.19,16,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,351,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,186,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,14,1.00,1.00,0.00,0.00,0.05,0.04,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,2093,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,44,0.00,0.00,0.00,0.00,1.00,0.00,0.05,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,53,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5698,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,236,2731,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 583,tcp,telnet,SF,848,25323,0,0,0,1,0,1,107,1,1,100,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.87,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,45,251,1.00,0.00,0.02,0.08,0.00,0.00,0.98,0.74,normal 0,udp,domain_u,SF,46,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,53,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,4937,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,1413,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,20,158,0.95,0.10,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,85,1,0.01,0.45,0.44,0.00,0.07,0.00,0.41,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,148,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,260,9541,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,79,255,1.00,0.00,0.01,0.01,0.03,0.01,0.04,0.01,normal 20252,tcp,telnet,RSTO,5281,14895,0,0,0,0,0,1,0,0,0,0,15,0,1,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,74,20,0.27,0.08,0.01,0.00,0.01,0.05,0.09,0.35,normal 0,tcp,http,SF,213,3276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,89,14,0.16,0.11,0.01,0.00,0.84,1.00,0.01,0.00,anomaly 0,tcp,smtp,SF,11798,1568,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.07,0.00,0.00,0.96,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTR,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.20,0.20,1.00,0.00,0.00,213,213,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.15,0.07,0.00,0.46,0.00,0.07,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,202,0.79,0.02,0.79,0.00,0.00,0.00,0.02,0.00,anomaly 0,tcp,http,SF,232,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,55,55,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,20,0.00,0.00,1.00,1.00,0.15,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,7,1.00,1.00,0.00,0.00,0.15,0.12,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,0,89,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,100,0.17,1.00,0.17,0.03,0.00,0.00,0.83,0.00,anomaly 0,tcp,http,S1,170,11680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.02,0.07,0.01,0.00,0.00,normal 0,tcp,http,SF,198,2004,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,67,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.91,0.90,0.00,0.00,0.00,0.90,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,4,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 11457,tcp,telnet,SF,125,3138,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,14,0.10,0.10,0.03,0.14,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,60,255,1.00,0.00,0.02,0.16,0.00,0.01,1.00,0.99,normal 0,tcp,http,SF,305,314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,247,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,19,2,0.11,0.26,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,32,102,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,150,0.94,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,87,0.34,0.02,0.34,0.02,0.00,0.00,0.03,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 14,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,47,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 8,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.35,0.69,0.00,0.00,0.00,0.69,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,201,978,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,162,19994,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,14,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,49,0.19,0.17,0.19,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,15,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,29,0.11,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,23,0.19,0.02,0.19,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,34,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,175,488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1339,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,34,0.17,0.06,0.17,0.06,0.00,0.00,0.03,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,5,1.00,1.00,0.00,0.00,0.08,0.09,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,9532,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,45,1.00,0.36,0.00,0.00,0.06,0.06,0.07,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,201,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,44,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,210,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,14,0.09,0.07,0.00,0.00,1.00,0.00,0.14,11,255,1.00,0.00,0.09,0.05,0.09,0.02,0.00,0.00,normal 0,tcp,http,SF,213,24572,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.14,1.00,0.00,0.57,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,47,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,134,126,0.94,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10389,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,54,0.34,0.04,0.34,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3446,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,149,0.58,0.03,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,336,685,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.24,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,657,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,0.21,25,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,62,0.10,0.05,0.10,0.03,0.00,0.00,0.00,0.00,normal 22,tcp,ftp,SF,341,1072,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,11334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,24,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 41,tcp,telnet,RSTO,110,9225,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,120,1,0.01,0.08,0.01,0.00,0.01,0.00,0.01,1.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.74,0.73,0.00,0.00,0.00,0.73,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,16,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,1596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,43,240,1.00,0.00,0.02,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,323,6186,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,208,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,1,255,1.00,0.00,1.00,0.07,0.00,0.01,0.00,0.01,normal 0,tcp,http,SF,249,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,255,1.00,0.00,0.01,0.02,0.00,0.01,0.00,0.00,normal 12,tcp,smtp,SF,632,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,104,0.94,0.03,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,12471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,206,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,3276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,38,0.00,0.00,0.00,0.00,1.00,0.00,0.13,155,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,5985,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,117,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.08,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.87,1.00,anomaly 0,tcp,http,SF,301,127,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,17,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,2728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,230,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 36280,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,321,1229,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,64,255,1.00,0.00,0.02,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,318,357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,197,0.00,0.00,0.00,0.00,1.00,0.00,0.00,197,197,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1094,329,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,138,146,0.49,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 3447,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.59,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1020,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,92,151,0.53,0.07,0.01,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,840,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,64,0.53,0.04,0.01,0.00,0.01,0.02,0.01,0.00,normal 0,tcp,http,SF,193,2833,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,53,1,0.02,1.00,0.02,0.00,0.00,0.00,0.91,1.00,anomaly 0,udp,domain_u,SF,31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,255,37,0.15,0.08,0.15,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,251,1721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,497,497,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,53,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,10,0.00,0.00,0.00,0.00,0.31,0.09,0.00,255,10,0.04,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,345,1846,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,16,1.00,1.00,0.00,0.00,0.21,0.05,0.00,255,36,0.14,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,18,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,330,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,93,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,2280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 22,tcp,ftp,SF,329,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,45,0.18,0.03,0.00,0.00,0.00,0.00,0.01,0.04,normal 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,274,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 12096,tcp,telnet,SF,99,2822,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,2,0.33,0.67,0.33,1.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,127,0.50,0.01,0.65,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,18,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 43,tcp,telnet,SF,121,10269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,2,0.01,0.04,0.01,1.00,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,172,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,10,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,320,639,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,15,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp,SF,1268,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,82,0.32,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,231,7648,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,39,0.00,0.00,0.00,0.00,1.00,0.00,0.08,30,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,261,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 11,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,8,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 37,tcp,ftp,SF,937,2720,0,0,0,19,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,22,0.15,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,13,1.00,1.00,0.00,0.00,0.27,0.12,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,other,SF,167,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,1,0.01,0.05,0.36,0.00,0.03,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,4,0.05,0.05,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,195,622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,12,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,80,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ssh,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,211,79,0.37,0.02,0.37,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,261,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,440,440,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,3487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,43,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.75,0.00,255,2,0.01,0.60,0.89,0.00,0.00,0.00,0.00,0.00,normal 12039,tcp,telnet,SF,798,276683,0,0,0,0,0,1,462,1,2,512,0,0,3,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,37,0.15,0.06,0.00,0.00,0.57,0.30,0.04,0.11,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,4,0.00,0.00,0.00,0.00,0.25,0.12,0.00,255,49,0.19,0.21,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,150,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 3030,udp,domain_u,SF,17,17,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,220,0.86,0.01,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,10,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,153,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,2324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,1,0.00,0.00,0.00,0.00,0.05,0.53,0.00,255,1,0.00,0.29,0.82,0.00,0.00,0.00,0.16,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,138,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,305,305,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,11200,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,15,86,0.87,0.13,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,6,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,283,1366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,94,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 871,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.65,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,10,1.00,1.00,0.00,0.00,0.19,0.07,0.00,255,50,0.20,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,15525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,193,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,2,1.00,1.00,0.00,0.00,0.29,0.43,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,465,9067,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,16,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,141,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2083,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,180,0.45,0.08,0.02,0.01,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,208,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,110,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,201,0.79,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,269,958,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,236,29200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,1.00,0.00,0.00,0.00,normal 0,tcp,http,SF,182,1805,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,12798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,16,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,149,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,231,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,3,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 29,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,0.20,0.40,0.22,49,47,0.96,0.04,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,9,0.00,0.00,1.00,1.00,0.11,0.08,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,152,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,7,1.00,1.00,0.00,0.00,0.44,0.25,0.00,255,40,0.16,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,33,4,0.12,0.15,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 41254,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.29,0.56,0.00,0.00,0.00,0.56,1.00,anomaly 10629,tcp,telnet,SF,88,1753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,2,0.29,0.29,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,84,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,20,0.15,0.02,0.15,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,21,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1313,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,127,3,0.02,0.55,0.84,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,348,348,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7321,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,58,0.07,0.12,0.07,0.05,0.00,0.00,0.02,0.00,normal 0,tcp,ftp_data,SF,374,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.07,0.04,0.00,0.89,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,229,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,1777,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,1,0.01,0.04,0.01,0.00,0.01,0.00,0.01,0.00,normal 1,tcp,smtp,SF,1019,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,178,193,0.76,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,9,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,18,1.00,1.00,0.00,0.00,0.26,0.06,0.00,255,18,0.07,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,89,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,89,0.35,0.64,0.35,0.00,0.00,0.00,0.52,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,1215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,25,1.00,0.00,1.00,0.28,0.00,0.00,0.00,0.00,anomaly 272,tcp,http,SF,327,274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7077,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,103,0.43,0.03,0.43,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,0.00,0.00,1.00,1.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,224,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,637,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,58,0.28,0.02,0.28,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,44,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,423,423,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 8952,tcp,telnet,SF,85,1736,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,51,0.20,0.02,0.00,0.00,0.55,0.69,0.00,0.00,normal 0,tcp,http,SF,212,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1353,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,2498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,52465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,257,678,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,12,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,1,0.01,0.00,0.96,1.00,0.00,1.00,0.00,255,1,0.00,0.84,0.00,0.00,0.01,0.00,0.80,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.79,0.79,1.00,0.00,0.00,172,183,1.00,0.00,0.01,0.03,0.01,0.01,0.31,0.34,normal 0,tcp,http,SF,252,712,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,34,0.09,0.09,0.00,0.00,1.00,0.00,0.00,139,237,1.00,0.00,0.01,0.05,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,230,9986,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,38,0.00,0.00,0.00,0.00,1.00,0.00,0.11,31,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,354,2771,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,83,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,129,1,0.01,0.92,0.94,0.00,0.94,1.00,0.00,0.00,anomaly 0,tcp,http,SF,269,2117,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,ftp,SF,1190,2447,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,133,0.52,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.40,0.38,0.00,0.00,0.00,0.38,1.00,anomaly 1,tcp,smtp,SF,1848,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,98,0.57,0.13,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1584,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,4,1.00,0.00,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,142,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,237,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,238,0.93,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,2309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,5,1.00,1.00,0.00,0.00,0.26,0.21,0.00,255,64,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,35,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,155,37,0.24,0.04,0.24,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,162,2532,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,46,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,146,0.57,0.43,0.57,0.00,0.09,0.00,0.34,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,141,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,10,0.04,0.26,0.04,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,142,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,171,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,3,0.00,0.00,0.00,0.00,0.60,0.40,0.00,255,86,0.34,0.01,0.42,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S3,242,80476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.50,0.25,0.00,0.00,1.00,0.00,0.50,2,156,1.00,0.00,0.50,0.08,0.50,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,269,745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,30,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,18,1.00,0.00,1.00,0.56,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,183,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,2828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,28,0.00,0.00,0.00,0.00,1.00,0.00,0.14,42,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,18,1.00,1.00,0.00,0.00,0.95,0.11,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,723,393,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,5,0.02,0.06,0.00,0.00,0.00,0.00,0.98,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,446,446,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,255,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,53,0.21,0.02,0.21,0.00,0.40,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,176,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,2038,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,smtp,SF,591,275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,163,0.64,0.03,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,316,2965,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,5949,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,644,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,153,191,0.74,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,13,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,1,0.05,0.00,0.94,1.00,0.01,1.00,0.00,255,1,0.00,0.79,0.00,0.00,0.03,0.00,0.58,1.00,anomaly 0,tcp,http,SF,293,13599,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,10,0.12,0.03,0.12,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,144,9534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,162,10384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,1,1.00,1.00,0.00,0.00,0.08,0.42,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,1917,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,47,0.00,0.00,0.00,0.00,1.00,0.00,0.11,43,255,1.00,0.00,0.02,0.05,0.02,0.01,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,22,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,221,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,346,11327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,1214,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1110,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,0,640,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,48,6,0.02,0.10,0.02,0.33,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,344,10839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,udp,domain_u,SF,46,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,251,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,13,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,17,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,211,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,1,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.04,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.94,1.00,anomaly 0,tcp,http,SF,205,1788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,77,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,305,0,0,0,0,0,0,1,0,0,0,2,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,102,38,0.37,0.03,0.37,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1692,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.06,0.01,0.00,0.99,0.00,0.00,0.00,normal 13428,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 589,tcp,telnet,SF,588,20138,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,31,0.12,0.37,0.00,0.00,0.37,0.10,0.00,0.03,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,40,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,85,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,142,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,202,0.79,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,1400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,44,46,0.00,0.00,0.00,0.00,1.00,0.00,0.07,180,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,177,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,593,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,11,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.55,0.50,0.00,0.03,0.00,0.51,1.00,anomaly 0,tcp,http,SF,218,759,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,14,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,206,658,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,9,255,1.00,0.00,0.11,0.03,0.00,0.00,0.00,0.01,normal 0,udp,domain_u,SF,43,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,248,0.00,0.00,0.00,0.00,0.99,0.01,0.01,173,134,0.77,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,1.00,0.04,normal 0,udp,domain_u,SF,46,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,178,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,8955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,6,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,86,147,0.81,0.03,0.01,0.01,0.05,0.01,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,17,0.00,0.00,1.00,1.00,0.15,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1754,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,150,192,0.61,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,150,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,215,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10389,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,81,0.63,0.08,0.63,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,15,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,325,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,215,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,7,0.00,0.00,0.00,0.00,0.44,0.12,0.00,255,7,0.03,0.01,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,137,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,234,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,181,2047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,24,27,1.00,0.00,0.04,0.07,0.00,0.07,0.00,0.04,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,26408,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,96,0.28,0.03,0.28,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,14,1.00,1.00,0.00,0.00,0.13,0.06,0.00,181,14,0.08,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1681,375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,166,0.53,0.03,0.01,0.01,0.00,0.00,0.01,0.00,normal 30438,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,296,1645,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,634,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,25,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,15,0.99,1.00,0.00,0.00,0.11,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,2,0.00,0.00,0.00,0.00,0.22,0.22,0.00,255,226,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 274,tcp,telnet,SF,282,7589,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,15,0.37,0.10,0.02,0.00,0.00,0.00,0.05,0.13,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,59,0.08,0.86,0.07,0.03,0.00,0.00,0.80,0.02,normal 0,tcp,http,SF,299,181,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.25,0.33,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,auth,SF,9,38,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,13,0.05,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,276,10861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.33,0.20,0.00,0.00,1.00,0.00,0.40,5,255,1.00,0.00,0.20,0.03,0.20,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,101,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,265,8646,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,126,0.62,0.04,0.62,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,631,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,244,0.86,0.10,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,221,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,13,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,2538,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.04,0.04,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.05,0.04,0.01,0.00,0.00,normal 0,tcp,http,SF,226,2819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,346,570,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,125,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,10,0.00,0.00,1.00,1.00,0.30,0.09,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,10,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10389,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,125,0.62,0.08,0.62,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,3433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,25925,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,33,0.00,0.00,0.00,0.00,1.00,0.00,0.06,125,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,33514,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,251,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.01,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,141,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,284,1051,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,8,255,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,156,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 461,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.39,0.74,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,141,141,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,http,SF,337,1112,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,13,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,15,1.00,1.00,0.00,0.00,0.30,0.08,0.00,255,55,0.22,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 905,tcp,telnet,SF,691,23036,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,36,0.14,0.24,0.00,0.00,0.24,0.11,0.00,0.03,normal 2736,tcp,telnet,SF,2225,35841,0,0,0,0,0,1,110,1,1,121,13,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,28,1.00,0.00,1.00,0.54,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,18,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2775,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.65,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,706,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,12,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,319,17905,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,111,0.87,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,441,441,0.00,0.00,0.00,0.00,1.00,0.00,0.00,183,183,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,335,383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 14608,tcp,telnet,SF,251,38322,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,55,0.22,0.02,0.00,0.00,0.50,0.60,0.00,0.00,normal 0,tcp,http,SF,245,1205,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,95,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,142,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,175,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 58,tcp,telnet,SF,835,1639484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,4,0.09,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,202,0.00,0.00,0.00,0.00,1.00,0.00,0.02,192,196,0.79,0.02,0.70,0.01,0.00,0.00,0.07,0.00,normal 0,tcp,http,SF,216,5095,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,37,0.00,0.00,0.00,0.00,1.00,0.00,0.08,104,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,36,0.14,0.01,0.14,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,15,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,9,1.00,1.00,0.00,0.00,0.26,0.11,0.00,115,34,0.25,0.03,0.03,0.06,1.00,0.85,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,6,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1566,385,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,55,0.22,0.02,0.00,0.00,0.58,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 21701,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,352,1,0.03,0.00,0.96,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,11,1.00,1.00,0.00,0.00,0.10,0.05,0.00,166,11,0.07,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,273,5189,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.04,0.03,0.00,0.15,0.04,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,403,403,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,1787,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,219,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,1259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,272,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2541,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,120,130,0.55,0.06,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,16,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.02,0.04,0.00,0.66,0.76,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,19,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,25519,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,16,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,1,0.04,0.00,0.88,1.00,0.01,0.99,0.00,255,1,0.00,0.61,0.00,0.00,0.02,0.00,0.54,1.00,anomaly 0,tcp,http,SF,302,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,48,37,0.77,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,654,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,239,0.82,0.05,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,65,0.00,0.02,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,32,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,32,234,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,85,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,181,0.71,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,194,0.76,0.02,0.76,0.00,0.00,0.00,0.02,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,446,446,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,194,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 2980,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.56,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.40,0.80,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,38,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,21,1.00,0.00,1.00,0.14,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,88,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,220,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.24,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,1,0.00,0.00,0.00,0.00,0.09,0.27,0.00,255,1,0.00,0.62,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,10616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,89,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,113,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,14,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,340,340,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,14,1.00,1.00,0.00,0.00,0.34,0.10,0.00,255,65,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,5905,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,209,245,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,265,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2256,497,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,249,39,0.14,0.02,0.00,0.05,0.00,0.00,0.83,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,4,1.00,1.00,0.00,0.00,0.36,0.36,0.00,173,46,0.25,0.02,0.02,0.04,0.99,0.96,0.00,0.00,anomaly 23,tcp,ftp,SF,243,776,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,11,0.50,0.18,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8325,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,112,0.44,0.03,0.44,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,38677,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,23,1.00,1.00,0.00,0.00,0.29,0.05,0.00,255,23,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,262,4165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.01,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.96,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,304,304,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,459,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,34,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,701,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,139,132,0.51,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,213,27264,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,49,255,1.00,0.00,0.02,0.02,0.02,0.02,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,184,0.72,0.03,0.72,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,290,2860,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,88,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,17,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1049,tcp,telnet,SF,760,68041,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,250,112,0.45,0.01,0.00,0.00,0.80,0.89,0.00,0.00,normal 0,udp,domain_u,SF,43,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,9728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,4,1.00,1.00,0.00,0.00,0.13,0.17,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,140,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.30,0.24,0.00,0.29,0.00,0.24,1.00,anomaly 0,tcp,http,SF,225,2649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,152,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 11,tcp,telnet,SF,105,1071,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,1,0.01,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,790,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,127,82,0.54,0.06,0.01,0.02,0.01,0.00,0.01,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,787,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,17,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,15,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,12,1.00,1.00,0.00,0.00,0.32,0.08,0.00,255,63,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 24,tcp,ftp,SF,338,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,240,44,0.18,0.03,0.00,0.00,0.00,0.00,0.01,0.05,normal 0,tcp,http,SF,221,944,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,46,0.93,0.14,1.00,0.11,0.00,0.00,0.00,0.00,anomaly 0,tcp,domain,SF,48,500,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,104,1,0.00,0.00,0.00,0.00,0.01,0.02,0.00,255,1,0.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,39,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 3,tcp,smtp,SF,1213,361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,54,0.61,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,11783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,35,0.27,0.03,0.27,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,telnet,SF,141,2117,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,2,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1234,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,11,0.04,0.02,0.00,0.00,0.89,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,46,1.00,0.00,1.00,0.07,0.00,0.02,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,298,1515,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,0,0,0.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,9,0.00,0.00,0.00,0.00,0.53,0.18,0.00,255,9,0.04,0.29,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,15,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,333,1300,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,16,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,2966,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,45,0.00,0.00,0.00,0.00,1.00,0.00,0.00,117,45,0.38,0.03,0.38,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,2668,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,auth,SF,13,36,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,242,5,0.02,0.05,0.00,0.00,0.01,0.00,0.00,0.20,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,10,1.00,1.00,0.00,0.00,0.33,0.07,0.00,255,10,0.04,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,3078,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,107,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,121,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1858,449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,106,0.42,0.04,0.00,0.00,0.15,0.00,0.02,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,20,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,929,459,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,154,0.70,0.04,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,3,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,148,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,12,1.00,1.00,0.00,0.00,0.30,0.10,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,30,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,57,203,0.70,0.04,0.70,0.01,0.02,0.00,0.23,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,1,1.00,1.00,0.00,0.00,0.02,0.11,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,smtp,SF,966,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,19,0.95,0.10,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,205,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,21240,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,143,134,0.39,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,417,417,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,1289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,55,255,1.00,0.00,0.02,0.04,0.02,0.01,0.00,0.00,normal 28,tcp,ftp,SF,1453,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,10,0.23,0.14,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,311,310,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,123,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,879,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,112,0.44,0.03,0.44,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,18,0.99,1.00,0.00,0.00,0.14,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,8,1.00,1.00,0.00,0.00,0.24,0.12,0.00,114,29,0.25,0.04,0.01,0.07,1.00,0.97,0.00,0.00,anomaly 0,tcp,http,SF,160,5942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,68,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,5971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,37,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1419,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,160,127,0.79,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,131,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,181,0.71,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,9,1.00,1.00,0.00,0.00,0.23,0.10,0.00,255,62,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,20,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,13,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 13501,tcp,telnet,RSTO,299,3769,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,59,18,0.31,0.10,0.02,0.00,0.02,0.06,0.08,0.28,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,256,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,27,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,19,1.00,1.00,0.00,0.00,0.13,0.04,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,19,0.00,0.00,1.00,1.00,0.18,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,314,1614,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,1919,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,31,0.00,0.00,0.00,0.03,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,213,0.84,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,2242,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,803,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,47,0.00,0.00,0.00,0.00,1.00,0.00,0.06,69,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4316,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,38,0.41,0.04,0.41,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,1516,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,161,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,5,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,167,1.00,0.00,0.50,0.10,0.00,0.00,1.00,0.75,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,153,0.60,0.03,0.61,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,126,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1922,373,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,153,143,0.50,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,6979,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,85,11,0.13,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,376,6030,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.67,9,229,1.00,0.00,0.11,0.12,0.00,0.00,0.56,0.95,normal 0,tcp,http,SF,226,1522,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,167,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 7,tcp,ftp_data,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,160,87,0.52,0.14,0.25,0.02,0.00,0.00,0.25,0.02,anomaly 0,udp,private,SF,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,14,0.00,0.00,0.00,0.00,0.93,0.13,0.00,255,14,0.05,0.94,0.07,0.00,0.16,0.00,0.77,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,38,0.15,0.07,0.15,0.00,0.07,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,201,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,110,0.43,0.02,0.44,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,5,0.14,0.08,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,9534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 4,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,65,0.32,0.02,0.32,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,16,1.00,1.00,0.00,0.00,0.29,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,2452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,97,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,1,0.06,0.00,0.93,1.00,0.01,1.00,0.00,255,1,0.00,0.73,0.00,0.00,0.03,0.00,0.50,1.00,anomaly 4,tcp,name,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,2,0.00,0.00,1.00,1.00,0.04,0.55,0.00,255,2,0.01,0.12,0.21,0.00,0.00,0.00,0.85,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,1,0.07,0.00,0.93,1.00,0.01,1.00,0.00,255,1,0.00,0.64,0.00,0.00,0.03,0.00,0.35,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,161,0.63,0.02,0.63,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,173,1,0.01,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,3,0.01,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,5286,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,1481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,1769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,45,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,normal 0,tcp,ftp_data,SF,0,4076,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,45,66,0.69,0.07,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,8,1.00,1.00,0.00,0.00,0.24,0.12,0.00,255,28,0.11,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,290,11829,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,174,13184,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,219,248,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.08,0.00,0.00,1.00,0.52,normal 0,tcp,http,SF,220,1528,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,148,4,0.03,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,3,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,165,25,0.06,0.05,0.06,0.08,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,1720,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,242,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,68,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,1026,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,2794,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,10,173,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,1,0.50,1.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,9847,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,186,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,3,0.00,0.00,0.00,0.00,0.30,0.20,0.00,255,29,0.11,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,2750,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.20,0.00,0.00,1.00,0.00,0.40,140,255,1.00,0.00,0.01,0.04,0.01,0.01,0.00,0.02,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,165,4357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.02,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,49,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,99,0.84,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5954,tcp,IRC,RSTR,861,9304,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,27,8,0.30,0.11,0.04,0.00,0.00,0.00,0.30,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,11,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,1630,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,91,0.37,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,3125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,37,0.00,0.00,0.00,0.00,1.00,0.00,0.05,96,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,105,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,114,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,11,1.00,1.00,0.00,0.00,0.39,0.18,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,22,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,22,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,73,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,207,7262,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,1,0.00,0.00,0.00,0.00,0.11,0.22,0.00,255,7,0.03,0.01,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,8454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,232,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,235,1,0.00,0.25,0.49,0.00,0.00,0.00,0.49,1.00,anomaly 0,tcp,http,SF,348,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,42,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,11,0.00,0.00,1.00,1.00,0.41,0.11,0.00,255,31,0.12,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.61,0.00,0.00,0.00,0.00,0.56,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,7,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,330,447,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,90,0.35,0.01,0.47,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,760,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,30,0.50,0.05,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,27,0.11,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,15,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,221,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.50,0.50,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,118,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,telnet,SF,122,1348,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,63,0.25,0.02,0.00,0.00,0.96,0.97,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.27,0.25,0.00,0.00,0.00,0.25,1.00,anomaly 0,tcp,http,SF,315,420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,211,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.01,0.00,0.14,0.00,0.84,1.00,anomaly 1,tcp,smtp,SF,1574,400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,4,1.00,0.00,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,106,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,4,1.00,1.00,0.00,0.00,0.04,0.09,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,12,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,18,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,18,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,858,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,174,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,20,1.00,1.00,0.00,0.00,0.43,0.09,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,163,18014,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2226,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,122,0.54,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,228,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,16,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,2426,2686,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,13,0.62,0.14,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4753,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,240,60,0.22,0.08,0.27,0.03,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,305,411,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,20,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,25683,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,14,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,1,0.04,0.00,0.89,1.00,0.01,0.99,0.00,255,1,0.00,0.62,0.00,0.00,0.02,0.00,0.55,1.00,anomaly 0,tcp,http,SF,339,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,110,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 7034,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.82,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,2809,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,5,1.00,1.00,0.00,0.00,0.22,0.17,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,287,2859,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,13110,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,15,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,325,2125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,129,255,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,48,11,0.23,0.06,0.23,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,19,0.00,0.00,1.00,1.00,0.32,0.07,0.00,255,19,0.07,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,18,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,18,0.07,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,205,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7196,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,89,0.27,0.04,0.27,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,304,1010,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,35195,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,28,0.11,0.02,0.11,0.00,0.00,0.00,0.76,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,1,0.06,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.71,0.00,0.00,0.03,0.00,0.47,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,26,0.00,0.00,0.00,0.00,0.41,0.08,0.00,255,60,0.24,0.18,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,224,1228,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,67,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,21,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,109,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,319,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,7,1.00,1.00,0.00,0.00,0.32,0.18,0.00,255,67,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,1042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,249,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,42,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,5,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,57,251,1.00,0.00,0.02,0.09,0.00,0.00,1.00,0.99,normal 0,udp,domain_u,SF,45,122,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,138,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,13,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,26,0.10,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,92,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,287,1728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,17,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5066,tcp,ftp_data,SF,5133876,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,60,1.00,0.00,1.00,0.12,0.25,0.02,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,37,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,78,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,78,0.31,0.01,0.31,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,79,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 32,tcp,http,SF,249,128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,44,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2522,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,141,0.55,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,749,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.08,0.45,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,1705,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,20,1.00,0.00,0.50,0.10,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,10,0.04,0.73,0.04,0.00,0.03,0.00,0.59,0.00,anomaly 0,tcp,http,SF,285,25519,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,27,0.00,0.00,0.00,0.00,1.00,0.00,0.19,49,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,33586,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,1905,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1887,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,191,0.84,0.05,0.01,0.01,0.00,0.01,0.00,0.00,normal 1,tcp,smtp,SF,851,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,49,189,0.73,0.08,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,158,3504,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,130,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,87,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,167,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,187,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,317,379,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,9,1.00,1.00,0.00,0.00,0.20,0.11,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,15,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,620,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1470,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,20,0.71,0.07,0.71,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,265,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,222,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,411,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,1433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,1918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,241,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.14,0.00,0.00,1.00,0.99,normal 0,tcp,http,SF,320,4624,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,5,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,2,0.00,0.00,0.00,0.00,0.20,0.20,0.00,255,8,0.03,0.01,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,10,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,10389,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,12,73,0.92,0.17,0.92,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,96,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,375,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,18,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,3,0.00,0.00,0.00,0.00,0.12,0.15,0.00,255,7,0.03,0.85,0.16,0.00,0.16,0.00,0.68,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,179,1.00,0.00,0.01,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,127,124,0.98,0.02,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.08,0.00,0.00,1.00,0.97,normal 0,tcp,http,SF,298,498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,83,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,10,0.00,0.00,0.00,0.00,0.23,0.09,0.00,255,10,0.04,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,26,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,20,0.99,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,1145,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,785,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,4143,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,23,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,22,0.09,0.02,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,139,0.55,0.01,0.55,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,11,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,9648,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,190,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,25078,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,114,1.00,0.00,0.17,0.11,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,306,234,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,16,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,16,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,10,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,1.00,1.00,1.00,0.00,0.67,2,10,1.00,0.00,0.50,0.30,0.00,0.00,1.00,1.00,normal 0,tcp,ftp_data,SF,19,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,57,0.86,0.29,0.86,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,1.00,1.00,0.00,0.00,1.00,0.00,0.00,79,140,0.47,0.03,0.01,0.01,0.97,0.26,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,18,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,48,3,0.06,0.19,0.02,0.00,0.71,1.00,0.02,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,8,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,3200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,919,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,122,0.48,0.01,0.00,0.00,0.62,0.66,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,208,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,702,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,22,0.00,0.05,0.00,0.05,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,32,0.32,0.05,0.35,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1579,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,31,0.51,0.08,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,164,9785,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,25,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12124,tcp,telnet,SF,165,7461,0,0,0,0,0,1,6,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,24,0.14,0.03,0.01,0.00,0.01,0.08,0.01,0.08,normal 0,tcp,http,SF,306,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,1,1.00,1.00,0.00,0.00,0.02,0.08,0.00,209,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,13,0.00,0.00,1.00,1.00,0.16,0.06,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,1752,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,817,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,188,0.75,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,110,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,116,0.00,0.00,0.00,0.00,1.00,0.00,0.03,234,169,0.72,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,20,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,3,1.00,0.67,0.00,0.33,0.01,0.06,0.67,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,3881,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,18,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,53,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,8091,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,1.00,0.14,1.00,0.00,0.29,119,242,1.00,0.00,0.01,0.02,0.00,0.00,0.76,0.88,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,40,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,3290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,28,0.00,0.00,0.00,0.00,1.00,0.00,0.18,35,255,1.00,0.00,0.03,0.03,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,317,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 36151,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,4,254,1.00,0.00,0.25,0.22,0.00,0.01,1.00,0.91,normal 0,tcp,http,SF,224,2602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,47,0.00,0.02,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,820,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,81,1.00,0.00,0.03,0.09,0.00,0.00,0.00,0.00,normal 7070,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.81,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,50,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,SF,3909,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,1,0.20,0.00,0.00,0.00,0.20,0.60,0.00,99,1,0.01,0.06,0.41,0.00,0.01,0.00,0.01,0.00,normal 1,tcp,smtp,SF,1601,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,92,52,0.57,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,196,22792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,255,1.00,0.00,0.00,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,146,423,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.50,0.50,normal 0,tcp,http,SF,253,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,8,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,12,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,219,1565,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,35,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,3090,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1436,315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,109,0.58,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,3616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,30,0.06,0.07,0.00,0.00,1.00,0.00,0.13,103,255,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,250,4713,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,16,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,8,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,1319,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,1.00,0.00,0.50,98,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.78,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,108,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,342,1268,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,14,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,2826,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,988,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,120,70,0.58,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,13,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 33,tcp,http,SF,353,270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,42,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,1,0.06,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,0.82,0.00,0.00,0.05,0.00,0.71,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.56,0.52,0.00,0.01,0.00,0.53,1.00,anomaly 1,tcp,smtp,SF,1710,375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,128,0.35,0.39,0.01,0.02,0.00,0.00,0.32,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,202,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,3516,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1334,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,95,1,0.01,0.51,0.80,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1281,443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,142,0.50,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,95,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,95,0.37,0.02,0.37,0.00,0.00,0.00,0.00,0.00,anomaly 8,tcp,smtp,SF,889,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,114,0.45,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,309,10378,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,55,0.22,0.20,0.22,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,197,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,286,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,768,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,113,0.57,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,12085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.33,0.01,0.00,0.03,normal 0,tcp,http,SF,265,2776,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,267,23875,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,211,247,1.00,0.00,0.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,194,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,231,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.33,0.25,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,3462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,5044,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,218,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,218,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,209,957,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,42,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,21,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,2115,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,45,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1079,udp,domain_u,SF,112,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,83,0.77,0.02,0.77,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,381,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,1993,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.04,0.00,0.00,0.01,0.01,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,247,1.00,0.00,0.17,0.01,0.00,0.00,1.00,0.03,normal 0,udp,domain_u,SF,44,154,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,283,0.00,0.00,0.00,0.00,1.00,0.01,0.01,208,169,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2092,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,126,0.96,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,286,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,21,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,199,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,539,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.03,0.00,0.00,0.21,0.03,normal 0,tcp,http,S2,54540,8315,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.05,0.05,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,9,1.00,0.00,1.00,0.33,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,169,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,174,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,357,10481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,5872,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,173,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,2706,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,41,158,0.68,0.15,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,166,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2005,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.64,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,60,0.16,0.05,0.16,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,3,1.00,1.00,0.00,0.00,0.43,0.43,0.00,247,63,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,43,0.16,0.05,0.16,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,355,540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,47,0.00,0.00,0.00,0.00,1.00,0.00,0.21,162,255,1.00,0.00,0.01,0.02,0.00,0.01,0.00,0.01,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,15,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,1.00,1.00,0.00,0.00,1.00,0.00,0.00,128,68,0.53,0.02,0.01,0.00,0.98,0.97,0.00,0.00,anomaly 1,tcp,smtp,SF,1156,521,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,47,243,0.89,0.09,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,9703,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,SF,1242,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,7,0.06,0.06,0.01,0.00,0.02,0.00,0.07,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,7,1.00,1.00,0.00,0.00,0.50,0.14,0.00,174,50,0.27,0.02,0.01,0.04,1.00,0.94,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,48,0.22,0.05,0.22,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,197,1,0.01,0.20,0.39,0.00,0.00,0.00,0.39,1.00,anomaly 0,tcp,http,SF,221,14561,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.05,0.05,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,8546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 9033,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.73,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,3796,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,3405,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,143,0.56,0.03,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,219,3313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,340,6731,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,1691,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,1875,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,other,SF,7012,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.20,0.00,0.00,0.00,0.20,0.40,0.00,129,1,0.01,0.05,0.12,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,205,465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,16802,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,1401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,89,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,1892,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,0.13,96,254,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,2295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,148,148,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,142,17893,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,21,118,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,14189,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,94,0.34,0.04,0.34,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,104,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,2,0.01,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,8,1.00,1.00,0.00,0.00,0.24,0.12,0.00,196,50,0.26,0.02,0.02,0.00,0.99,0.96,0.00,0.00,anomaly 0,tcp,http,SF,203,1040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,113,249,1.00,0.00,0.01,0.10,0.00,0.00,0.35,0.70,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,36,0.14,0.01,0.66,0.00,0.00,0.00,0.00,0.00,normal 5831,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.54,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,250,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,179,1,0.01,0.09,0.06,0.00,0.00,0.00,0.07,1.00,anomaly 0,tcp,smtp,SF,573,283,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,133,0.63,0.21,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,19,1.00,1.00,0.00,0.00,0.40,0.08,0.00,217,18,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1637,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,5,5,1.00,0.00,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,8004,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,157,27062,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,23,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,14,1.00,1.00,0.00,0.00,0.23,0.07,0.00,255,42,0.16,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,93,0.85,0.02,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,202,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,10,1.00,0.90,0.00,0.10,0.03,0.06,0.20,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,35,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,11,0.12,0.04,0.12,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,111,0.16,0.10,0.16,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,20,1.00,1.00,0.00,0.00,0.34,0.05,0.00,255,65,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,1948,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,346,5859,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,219,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,94,7466,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,1,0.01,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,796,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,152,222,0.88,0.03,0.01,0.01,0.00,0.00,0.01,0.03,normal 0,tcp,http,SF,222,3351,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,61,62,0.00,0.00,0.00,0.00,1.00,0.00,0.03,147,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,163,1,0.01,0.40,0.40,0.00,0.00,0.00,0.39,1.00,anomaly 0,tcp,http,SF,237,5939,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,2685,323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,46,0.18,0.53,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,1080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,253,1.00,0.00,0.25,0.20,0.00,0.00,1.00,0.99,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,358,1329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12,tcp,X11,SF,1126224,16064,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,9,0.90,0.20,0.10,0.00,0.10,0.11,0.10,0.11,normal 0,tcp,http,S1,163,14600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,2,1.00,1.00,0.00,0.00,0.17,0.50,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,smtp,SF,715,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,53,0.65,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,468,468,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,17,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,44,0.17,0.65,0.16,0.05,0.00,0.00,0.58,0.02,normal 0,tcp,http,SF,331,924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,94,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,135,1,0.01,0.08,0.11,0.00,0.00,0.00,0.11,1.00,anomaly 0,tcp,http,SF,324,1668,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,13,1.00,0.00,0.10,0.15,0.00,0.15,0.00,0.08,normal 0,tcp,http,SF,299,12067,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,7,1.00,1.00,0.00,0.00,0.44,0.31,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,17,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,106,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 7,tcp,smtp,SF,11998,1383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,140,0.55,0.02,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,220,2714,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,33,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,17,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.25,0.25,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,anomaly 46,tcp,smtp,SF,13108,1381,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,50,175,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,2004,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,422,1,0.08,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,7203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,42,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,5888,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.04,0.02,0.01,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,19,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,19,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 23,tcp,http,SF,221,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.03,0.00,0.01,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,19,0.86,0.14,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,282,4768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,30,93,1.00,0.00,0.03,0.08,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,292,9001,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,70,1.00,0.00,0.04,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,179,1.00,0.00,1.00,0.25,0.00,0.00,1.00,1.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,162,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,0,5696,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,81,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp_path,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,1.00,1.00,0.00,0.00,anomaly 4474,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.68,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,6,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,2769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,50,255,1.00,0.00,0.02,0.03,0.02,0.00,0.00,0.00,normal 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,1,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,40,249,1.00,0.00,0.03,0.17,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,347,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.15,0.00,0.00,0.84,0.88,normal 0,tcp,http,SF,210,16144,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,0.07,3,5,1.00,0.00,0.33,0.40,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,18,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,1414,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.20,0.33,0.00,0.00,1.00,0.00,0.33,108,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,193,17733,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,981,410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,66,0.26,0.05,0.00,0.00,0.47,0.00,0.02,0.00,normal 1,tcp,smtp,SF,971,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,72,38,0.53,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,710,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,125,0.49,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,16,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.57,20,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,2802,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,0.08,5,255,1.00,0.00,0.20,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,378,2488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,209,0.82,0.02,0.82,0.00,0.00,0.00,0.02,0.00,anomaly 0,tcp,smtp,SF,678,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,229,141,0.61,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,244,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,2,0.00,0.00,0.00,0.00,0.17,0.25,0.00,255,2,0.01,0.15,0.44,0.00,0.00,0.00,0.49,0.00,anomaly 0,tcp,smtp,SF,861,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,197,0.76,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,15,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,1,0.00,0.00,1.00,1.00,0.01,0.53,0.00,255,3,0.01,0.36,0.68,0.00,0.00,0.00,0.93,0.33,anomaly 37072,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,700,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,79,0.31,0.29,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,162,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,15777,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,249,1820,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,368,200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,5,151,0.80,0.40,0.80,0.04,0.20,0.00,0.00,0.00,anomaly 0,tcp,http,SF,189,3865,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,48,0.00,0.00,0.00,0.00,1.00,0.00,0.06,58,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,3025,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,226,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,2055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,6,1.00,1.00,0.00,0.00,0.27,0.18,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,138,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,3867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,109,0.43,0.07,0.01,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,6822,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,211,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,63,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,283,973,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,179,255,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,tcp,smtp,SF,766,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,41,198,0.73,0.10,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,303,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,187,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1096,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,167,0.70,0.05,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,34,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,34,0.14,0.66,0.14,0.00,0.02,0.00,0.53,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,88,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,88,0.35,0.02,0.35,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,13,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,784,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,139,0.55,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,226,29200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.22,0.00,0.77,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.26,0.00,0.74,1.00,anomaly 0,tcp,http,SF,319,3831,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,17,255,1.00,0.00,0.06,0.04,0.06,0.00,0.00,0.00,normal 0,tcp,http,SF,281,744,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,33,0.00,0.00,0.00,0.00,1.00,0.00,0.09,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,8584,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,5,0.10,0.08,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,346,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,12,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8766,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,33,0.21,0.03,0.21,0.00,0.00,0.00,0.04,0.00,normal 0,tcp,other,SF,3775,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,1,0.04,0.00,0.00,0.00,0.04,0.43,0.00,175,1,0.01,0.07,0.33,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.20,0.00,0.00,1.00,0.95,normal 0,tcp,http,SF,306,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,53,0.21,0.04,0.21,0.00,0.21,0.00,0.02,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,1,0.00,0.00,0.00,0.00,0.10,0.20,0.00,255,4,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,938,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1599,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,131,0.69,0.13,0.03,0.02,0.00,0.02,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,103,134,0.54,0.07,0.02,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,25,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,25,0.10,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,711,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,1694,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2361,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,103,119,0.31,0.05,0.01,0.03,0.03,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,250,1.00,0.00,0.50,0.32,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,156,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,151,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,113,0.44,0.05,0.48,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,3,1.00,1.00,0.00,0.00,0.05,0.09,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,286,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,11,1.00,1.00,0.00,0.00,0.28,0.10,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,1820,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,143,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,246,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,16,0.00,0.00,0.00,0.00,0.50,0.09,0.00,255,16,0.06,0.60,0.44,0.00,0.05,0.00,0.51,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,183,0.72,0.03,0.72,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,6300,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,8,1.00,1.00,0.00,0.00,0.09,0.09,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,56,0.00,0.00,0.00,0.00,1.00,0.00,0.04,33,208,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 31,tcp,ftp,SF,848,2586,0,0,0,18,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,37,0.15,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,6,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,1.00,0.50,1.00,0.00,255,1,0.00,0.65,0.65,0.00,0.00,0.00,0.65,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,365,365,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,191,5678,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1901,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,65,0.43,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,201,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,191,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,20,0.00,0.00,1.00,1.00,0.17,0.07,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,3,0.00,0.00,0.00,0.00,0.08,0.11,0.00,255,3,0.01,0.24,0.96,0.00,0.00,0.00,0.04,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,74,37,0.18,0.08,0.18,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,866,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,170,0.58,0.07,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,14,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1013,381,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,74,0.80,0.30,0.10,0.03,0.00,0.00,0.00,0.00,normal 4,tcp,http,SF,252,273544,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,3351,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,306,306,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,218,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,23,0.38,0.08,0.38,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,169,16,0.09,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,219,3846,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,90,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,295,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,3957,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,122,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,241,38,0.16,0.05,0.16,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,49,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,375,1003,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,350,2097,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,6,0.50,0.17,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,23,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,finger,SF,7,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,14,0.06,0.03,0.00,0.14,0.00,0.00,0.00,0.00,normal 244,tcp,telnet,SF,215,6074,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,28,0.23,0.04,0.01,0.00,0.00,0.00,0.02,0.07,normal 0,tcp,http,SF,352,1010,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,82,2,0.02,0.71,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,5299,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.07,0.00,0.00,0.07,0.47,normal 0,tcp,http,SF,226,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.20,1.00,0.00,0.40,255,234,0.92,0.01,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,ssh,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,10,0.00,0.00,1.00,1.00,0.08,0.08,0.00,255,10,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,1236,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,94,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,608,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,anomaly 0,tcp,http,SF,222,1295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,22,1.00,0.00,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,1,0.01,0.51,0.84,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,103,0.58,0.02,0.58,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,2446,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,116,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,210,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,4,1.00,1.00,0.00,0.00,0.06,0.08,0.00,246,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,8,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,311,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,7,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,787,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,167,0.65,0.08,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,21,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,14,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,916,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,34,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.25,0.12,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,8,250,1.00,0.00,0.12,0.03,0.00,0.00,1.00,0.31,normal 10332,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.67,0.95,0.00,0.00,0.00,0.00,0.00,normal 2650,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.83,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,8,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,155,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,180,175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,1,0.00,0.00,1.00,1.00,0.01,0.54,0.00,255,1,0.00,0.21,0.38,0.00,0.00,0.00,0.85,1.00,anomaly 0,tcp,http,SF,291,928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,319,319,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,ftp,SF,57,170,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,7,0.30,0.17,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,46,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1171,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,169,0.79,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,192,0.75,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,1028,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,3660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,1026,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,23,255,1.00,0.00,0.04,0.09,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,120,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,262,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,218,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,25,1.00,1.00,0.00,0.00,0.10,0.04,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,3543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,7,1.00,1.00,0.00,0.00,0.70,0.20,0.00,255,61,0.24,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,7,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1288,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,154,0.87,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,22,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,9,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,13,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,118,0.00,0.00,0.00,0.00,0.86,0.03,0.00,255,160,0.63,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,13,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,81,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,81,0.32,0.04,0.32,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,204881,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,120,0.52,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,83,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,83,0.33,0.64,0.33,0.00,0.01,0.00,0.52,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,6062,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,52,0.91,0.18,0.91,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,193,76,0.22,0.02,0.22,0.03,0.00,0.00,0.01,0.00,normal 0,udp,domain_u,SF,45,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,138,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,449,449,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,6,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,136,8,0.06,0.05,0.06,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,914,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,5,141,0.80,0.40,0.20,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,142,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,288,0.00,0.00,0.00,0.00,1.00,0.00,0.01,131,200,0.89,0.02,0.89,0.01,0.00,0.00,0.08,0.00,normal 0,tcp,http,SF,358,1486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,24,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,90,0.97,0.05,0.97,0.30,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,1966,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.03,0.03,0.01,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,16,0.00,0.00,1.00,1.00,0.15,0.07,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12324,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,16,0.08,0.03,0.08,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,382,6496,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,0.16,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,1143,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,18,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 28,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,0.20,0.40,0.40,21,20,0.95,0.10,0.05,0.00,0.00,0.00,0.00,0.00,normal 39627,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,245,1143,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,12,1.00,0.00,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,177,177,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,http,SF,246,242,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,18,1.00,1.00,0.00,0.00,0.29,0.05,0.00,255,18,0.07,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,56,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,44,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,137,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,223,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 6515,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.52,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,143,9598,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,0,5828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,87,0.34,0.01,0.34,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,271,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,21,114,1.00,0.00,0.05,0.04,0.00,0.00,1.00,1.00,normal 0,tcp,ftp_data,SF,8173,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,9,0.00,0.00,0.00,0.00,0.69,0.23,0.00,255,15,0.06,0.33,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,48,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,48,0.19,0.02,0.19,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 39602,tcp,imap4,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,355,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,6527,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.23,0.22,0.00,0.00,0.00,0.22,1.00,anomaly 0,tcp,http,SF,312,6107,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.83,0.83,1.00,0.00,0.00,36,122,1.00,0.00,0.03,0.16,0.00,0.01,0.92,0.86,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,248,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,237,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,5,0.00,0.00,0.00,0.00,0.19,0.12,0.00,255,5,0.02,0.89,0.13,0.00,0.11,0.00,0.76,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,17,1.00,1.00,0.00,0.00,0.16,0.06,0.00,161,17,0.11,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,86,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S1,235,21900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,1.00,0.50,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,90,0.85,0.02,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,115,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,115,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,14,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,154,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,154,0.60,0.01,0.60,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,303,15021,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,80,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,215,26526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,45,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,6,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,24,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12123,tcp,telnet,SF,8641,16120,0,0,0,0,0,1,0,0,0,0,29,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,28,0.15,0.02,0.01,0.07,0.12,0.75,0.00,0.00,normal 0,tcp,http,SF,285,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,48,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,9998,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S2,320,0,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.01,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,279,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.05,0.00,0.00,0.23,0.65,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,13,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,5,0.02,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,453,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,153,9267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,71,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,967,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,19,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,134,0.89,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,269,1283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.02,0.01,normal 0,tcp,finger,SF,10,142,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,4,0.02,0.54,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,11,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,36362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.01,0.02,0.01,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,172,1138,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.10,0.00,0.00,1.00,0.00,0.40,75,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,7596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,16,0.00,0.00,0.00,0.00,0.89,0.17,0.00,255,16,0.06,0.75,0.29,0.00,0.10,0.00,0.61,0.00,anomaly 0,udp,domain_u,SF,43,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,212,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,43,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,8,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,13,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,13,0.05,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,457,457,0.00,0.00,0.00,0.00,1.00,0.00,0.00,224,224,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,86,1.00,0.00,0.17,0.20,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,364,236,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,8,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,209,1965,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.32,0.32,normal 0,tcp,IRC,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,43,34,0.79,0.07,0.16,0.00,0.02,0.03,0.65,0.82,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,275,3183,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,175,0.69,0.02,0.69,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,14,247,1.00,0.00,0.07,0.13,0.00,0.00,1.00,0.68,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,19,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,67,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,72,0.28,0.20,0.28,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,232,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,225,106,0.47,0.02,0.47,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,149,185,1.00,0.00,0.01,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,225,2617,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,1240,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,132,0.52,0.02,0.52,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,105,22,0.21,0.10,0.01,0.00,0.87,1.00,0.01,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,107,1,0.01,0.56,0.55,0.00,0.06,0.00,0.53,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,213,1.00,0.00,0.25,0.17,0.00,0.00,1.00,0.96,normal 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,190,255,1.00,0.00,0.01,0.03,0.00,0.00,0.02,0.01,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.72,0.36,0.00,0.02,0.00,0.62,0.00,anomaly 0,tcp,http,SF,203,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,238,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,15,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,103,0.51,0.01,0.51,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,152,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 16800,tcp,telnet,SF,1970,101286,0,0,0,0,1,1,151,0,1,151,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,6,0.16,0.11,0.03,0.00,0.03,0.00,0.05,0.33,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,54,1.00,0.00,1.00,0.09,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,211,2203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,24,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,24,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,29,1.00,0.00,1.00,0.28,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,325,6665,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,203,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,123,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,114,0.00,0.00,0.00,0.00,1.00,0.00,0.02,236,182,0.77,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,815,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,41,0.00,0.34,0.00,0.00,1.00,0.00,0.07,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,S2,149,43465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,20,1.00,0.05,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,20,1.00,1.00,0.00,0.00,0.28,0.06,0.00,151,45,0.26,0.03,0.01,0.04,1.00,0.89,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,181,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,SF,9,269,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,6,0.02,0.02,0.00,0.00,0.00,0.00,0.05,0.00,normal 2603,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.67,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,22,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,698,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,370,414,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,6,173,1.00,0.00,0.17,0.22,0.00,0.00,0.33,0.94,normal 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,1973,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,44,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,6902,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,64,2,0.02,1.00,0.02,1.00,0.00,0.00,0.92,1.00,anomaly 0,tcp,http,SF,231,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,3026,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,101,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,91,0.72,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,2251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,8,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,25,1.00,1.00,0.00,0.00,0.15,0.04,0.00,255,25,0.10,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,247,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,13,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,191,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,9,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12,tcp,smtp,SF,1100,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,95,0.77,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,28,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,229,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.69,0.68,0.00,0.00,0.00,0.68,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,1368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,114,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 39399,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,40494,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,62,0.24,0.02,0.15,0.00,0.28,0.32,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,201,1.00,0.00,0.08,0.12,0.00,0.00,1.00,0.72,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,9,1.00,1.00,0.00,0.00,0.32,0.11,0.00,255,22,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,1042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,244,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,2550,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,487,7477,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,269,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,28,0.23,0.06,0.23,0.00,0.02,0.00,0.52,0.00,anomaly 3,tcp,telnet,SF,106,3079,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,1,0.01,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1248,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,4,1.00,0.00,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1376,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.07,0.04,0.00,0.90,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,77,0.30,0.02,0.30,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,18,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,4004,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,150,243,0.95,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 4,tcp,ftp,SF,6,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,1,0.00,0.03,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,271,920,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,1,0.05,0.00,0.94,1.00,0.01,1.00,0.00,255,1,0.00,0.80,0.00,0.00,0.03,0.00,0.61,1.00,anomaly 0,tcp,http,SF,225,550,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,20,1.00,1.00,0.00,0.00,0.17,0.08,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,252,8260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,134,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,229,0.90,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,348,1322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.06,0.06,0.00,0.00,1.00,0.00,0.12,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,176,2207,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,713,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,187,0.76,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,3,1.00,1.00,0.00,0.00,0.30,0.40,0.00,90,29,0.26,0.04,0.02,0.07,1.00,0.79,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,54,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,291,573,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,146,1,0.01,0.05,0.01,0.00,0.01,0.00,0.00,0.00,anomaly 0,tcp,http,SF,221,671,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,2596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,11,1.00,1.00,0.00,0.00,0.23,0.10,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,127,0.50,0.02,0.50,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,23,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,14,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,33,0.13,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,330,6891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,26,1.00,0.00,1.00,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,16,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,672,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,132,104,0.44,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1998,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,20,0.62,1.00,0.00,0.00,0.10,0.04,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1445,329,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,41,0.93,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,65,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.64,0.25,0.00,0.01,0.00,0.52,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,5,1.00,0.00,1.00,0.80,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,297,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,124,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,15,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,15,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,41,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,126,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.08,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,149,58,0.27,0.05,0.21,0.03,0.00,0.00,0.01,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,17,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,IRC,SF,66,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,11,0.23,0.04,0.02,0.00,0.00,0.00,0.15,0.64,normal 0,tcp,smtp,SF,1194,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,153,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,58,0.23,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,10,1.00,1.00,0.00,0.00,0.40,0.16,0.00,255,30,0.12,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,21,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,28,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,14,0.85,1.00,0.00,0.00,0.08,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,59,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1133,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,157,0.65,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,305,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,6763,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,udp,domain_u,SF,45,150,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,176,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,11,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 7232,tcp,X11,SF,7248552,1437092,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,2,0.18,0.36,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,271,3200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,225,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,0.99,1.00,anomaly 0,udp,domain_u,SF,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,175,20,0.09,0.03,0.09,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,2610,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,51,0.00,0.00,0.00,0.00,1.00,0.00,0.06,29,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,12944,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,34,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,21,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,320,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,http,SF,332,12282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,227,1.00,0.00,0.07,0.11,0.00,0.00,0.07,0.66,normal 0,tcp,auth,SF,14,37,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,5,0.03,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,125,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,227,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,19,1.00,1.00,0.00,0.00,0.17,0.04,0.00,255,19,0.07,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,SF,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,124,0.67,0.76,0.00,0.04,1.00,0.00,0.36,9,9,1.00,0.00,0.78,0.00,0.56,0.56,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,128,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,321,22780,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,11,0.00,0.00,1.00,1.00,0.16,0.09,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,8,1.00,1.00,0.00,0.00,0.73,0.18,0.00,255,59,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,5,255,1.00,0.00,0.20,0.09,0.00,0.00,1.00,0.66,normal 40,tcp,telnet,SF,118,6401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,3,0.01,0.07,0.01,0.67,0.00,0.00,0.00,0.33,normal 0,tcp,ftp_data,SF,7321,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,55,0.38,0.03,0.38,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,14,1.00,1.00,0.00,0.00,0.25,0.09,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 89,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.64,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,80,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,28808,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,71,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.04,0.00,0.00,1.00,0.00,0.08,255,58,0.23,0.02,0.03,0.00,0.67,0.79,0.00,0.00,normal 0,tcp,http,SF,312,22403,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,4,0.05,0.06,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 3,tcp,smtp,SF,1104,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,169,0.62,0.01,0.00,0.01,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,241,97,0.39,0.01,0.39,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.11,0.04,0.05,0.01,0.00,0.03,normal 0,tcp,telnet,S1,342,8243,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,8,0.03,0.70,0.00,0.00,0.69,0.12,0.00,0.00,normal 0,tcp,http,SF,330,4294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,68,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,226,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,182,0.71,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 29,udp,domain_u,SF,110,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,19,0.79,0.08,0.79,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,647,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,13,11,0.85,0.15,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,927,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,81,0.94,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,1837,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,28,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,162,8378,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,14,255,1.00,0.00,0.07,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,734,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,69,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,44,0.17,0.32,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,229,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,19,1.00,1.00,0.00,0.00,0.35,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,16407,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,200,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,569,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,126,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,164,8083,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.29,0.29,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,35195,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,1,0.05,0.00,0.00,0.00,0.05,0.32,0.00,237,1,0.00,0.05,0.37,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,263,27619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,67,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,8379,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,70,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,5,1.00,0.60,0.00,0.00,1.00,0.00,0.60,25,137,0.12,0.08,0.04,0.01,0.92,0.02,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1713,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2297,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,26,0.10,0.50,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,457,457,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,202,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,95,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,57,0.58,0.02,0.58,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,8,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,134,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,17,237,1.00,0.00,0.06,0.19,0.00,0.00,1.00,1.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,1,0.01,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.51,0.00,0.00,0.00,0.00,0.47,1.00,anomaly 0,tcp,http,SF,288,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,22,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,19,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,3765,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,5,0.93,1.00,0.07,0.00,0.19,0.15,0.00,255,6,0.02,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,91,0.14,0.07,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,echo,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,2,0.63,0.50,0.37,0.50,0.01,0.42,0.00,255,2,0.01,0.38,0.90,0.00,0.57,0.50,0.33,0.50,anomaly 0,tcp,http,SF,301,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1376,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,80,0.31,0.02,0.31,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,208,6530,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,17,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,16,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1580,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,172,150,0.87,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,199,174,0.87,0.03,0.01,0.00,0.00,0.00,0.87,1.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.79,0.79,1.00,0.00,0.00,38,118,1.00,0.00,0.03,0.17,0.00,0.00,0.89,0.97,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,125,109,0.87,0.02,0.87,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,296,1999,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,163,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,1,0.01,0.00,0.92,1.00,0.01,1.00,0.00,210,1,0.00,0.44,0.00,0.00,0.00,0.00,0.39,1.00,anomaly 7755,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.61,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,205,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,205,0.80,0.01,0.80,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 16885,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,22,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,22,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,367,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,369,546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.04,0.00,0.00,1.00,0.00,0.12,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,925,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,105,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,121,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,30,0.56,0.04,0.56,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,1125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 4229,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,950,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,178,159,0.68,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,19,1.00,1.00,0.00,0.00,0.24,0.05,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,22,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,ftp,SF,1261,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,135,0.53,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,204,2494,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.03,normal 0,udp,domain_u,SF,45,123,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,53,0.00,0.00,0.00,0.00,0.98,0.04,0.00,255,162,0.64,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,6356,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,105,0.84,0.06,0.84,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,5166,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,174,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,13,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,186,2958,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1772,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,85,70,0.82,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,102,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,14,0.88,0.12,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,2042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,191,15272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,2300,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,173,2424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.25,0.33,0.00,0.00,1.00,0.00,0.33,10,255,1.00,0.00,0.10,0.02,0.10,0.00,0.00,0.00,normal 0,tcp,http,SF,211,811,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,231,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,365,1148,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,894,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,78,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,589,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,46,1.00,0.00,0.02,0.00,0.00,0.00,0.26,0.26,anomaly 0,tcp,http,SF,231,375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,7,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,27,0.11,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,1,0.00,0.00,1.00,1.00,0.05,1.00,0.00,255,1,0.00,0.41,0.00,0.00,0.00,0.00,0.11,1.00,anomaly 1,tcp,finger,SF,7,409,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,10,0.05,0.21,0.05,0.20,0.00,0.00,0.00,0.00,normal 12753,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.65,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,250,270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,2,0.00,0.00,0.00,0.00,0.08,0.08,0.00,255,3,0.01,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,12,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,239,350,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,29,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,1695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,41,26,0.17,0.10,0.17,0.08,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,459,459,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,245,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,272,3874,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,15,0.00,0.00,0.00,0.00,1.00,0.00,0.33,158,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,14,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,99,0.41,0.01,0.41,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,183,8939,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,133,255,1.00,0.00,0.01,0.04,0.01,0.00,0.01,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,701,2070,0,0,0,14,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,44,0.26,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,218,670,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,3,1.00,1.00,0.00,0.00,0.33,0.22,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,21,0.18,0.03,0.18,0.00,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,1376,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,187,0.69,0.02,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.74,0.73,0.00,0.00,0.00,0.73,1.00,anomaly 0,tcp,http,SF,212,9911,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.02,0.04,0.00,0.00,0.00,normal 0,tcp,http,SF,291,26097,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,59,0.05,0.05,0.00,0.00,1.00,0.00,0.14,154,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,20,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,13,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,1248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,4591,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,42,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,2156,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,2,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,377,12591,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,9,3,0.33,0.33,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,73,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,1836,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,92,36,0.39,0.11,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,14,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,2,0.00,0.00,0.00,0.00,0.18,0.45,0.00,255,2,0.01,0.24,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,1503,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,281,3816,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,37,0.00,0.00,0.00,0.00,1.00,0.00,0.14,29,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,368,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.96,0.00,0.00,0.00,0.03,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.09,0.00,0.00,1.00,0.87,normal 0,udp,domain_u,SF,46,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,182,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,3381,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,0.09,48,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,3307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,157,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,17,1.00,1.00,0.00,0.00,0.26,0.06,0.00,255,44,0.17,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,349,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 24,tcp,ftp,SF,235,768,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,165,11,0.07,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,670,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,35,0.73,0.12,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,114,0.45,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 24,tcp,ftp,SF,336,1052,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,29,0.16,0.04,0.01,0.00,0.00,0.00,0.01,0.07,normal 0,tcp,http,SF,282,4060,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,12,0.00,0.00,0.00,0.00,1.00,0.00,0.42,25,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,10261,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,1,0.00,0.00,0.00,0.00,0.08,0.67,0.00,135,1,0.01,0.07,0.44,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,3712,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,227,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1209,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,117,98,0.84,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.07,0.15,0.00,0.00,0.00,0.73,0.00,anomaly 0,tcp,http,SF,312,8819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,6062,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,82,0.51,0.03,0.51,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,20,0.08,0.15,0.08,0.00,0.14,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,165,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,51,0.57,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,21,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,267,11375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.02,0.02,0.01,0.00,0.00,normal 0,tcp,http,SF,219,495,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,8,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,274,4841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,5,255,1.00,0.00,0.20,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,12,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,204768,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,85,0.81,0.06,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,348,8143,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,16,0.00,0.00,0.00,0.00,1.00,0.00,0.38,45,255,1.00,0.00,0.02,0.06,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,207,667,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,35,0.18,0.03,0.18,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,536,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,24,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,7176,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1388,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,0.00,0.50,1.00,0.00,255,10,0.04,0.09,0.00,0.00,0.87,0.00,0.01,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,196,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,5,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,220,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,16,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,331,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,113,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,4,1.00,1.00,0.00,0.00,0.33,0.50,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,167,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,15,1.00,1.00,0.00,0.00,0.37,0.10,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,74,0.92,0.17,0.92,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,17,0.07,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,1.00,1.00,0.00,0.00,0.40,0.60,0.00,255,62,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,918,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,110,0.51,0.07,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,18,0.00,0.00,0.00,0.00,0.42,0.09,0.00,255,63,0.25,0.28,0.77,0.00,0.06,0.00,0.17,0.00,anomaly 0,tcp,http,SF,311,1426,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,16,255,1.00,0.00,0.06,0.05,0.00,0.02,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,6,0.00,0.00,1.00,1.00,0.06,0.08,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,218,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,16,1.00,1.00,0.00,0.00,0.21,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,206,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,1355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.00,0.00,0.00,1.00,0.00,0.00,0.00,233,195,0.84,0.01,0.00,0.00,0.00,0.00,0.84,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,182,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,182,0.71,0.01,0.71,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,212,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S3,368,424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,45,0.02,0.04,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,rje,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,1,0.00,0.00,0.98,1.00,0.02,1.00,0.00,160,1,0.01,0.34,0.01,0.00,0.00,0.00,0.28,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,6,1.00,1.00,0.00,0.00,0.21,0.14,0.00,191,48,0.25,0.02,0.01,0.00,0.99,0.96,0.00,0.00,anomaly 0,tcp,http,SF,233,4097,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,209,1155,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,38,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 9,tcp,telnet,SF,103,1448,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,253,1,0.00,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,274,1981,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,35,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,16,0.84,0.11,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,SF,9,38,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,2,0.03,0.13,0.03,1.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,7367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,45,255,1.00,0.00,0.02,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 37370,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,195,2150,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,7,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,320,6250,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,62,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,4727,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1303,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,119,77,0.65,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,151,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S1,10220,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,162,54,0.28,0.03,0.28,0.04,0.01,0.02,0.00,0.00,normal 0,udp,domain_u,SF,42,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,182,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,200,0.78,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,13,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,4,1.00,1.00,0.00,0.00,0.10,0.15,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,3166,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,1809,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,14,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,198,12,0.06,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,16,0.00,0.00,1.00,1.00,0.73,0.14,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,243,1012,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,15876,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,61,0.29,0.03,0.29,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,2735,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,3,1.00,1.00,0.00,0.00,0.13,0.17,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,8,0.67,0.17,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.18,0.00,0.82,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.21,0.00,0.79,1.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,131,1.00,0.00,1.00,0.34,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1267,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,170,0.95,0.04,0.02,0.01,0.04,0.02,0.00,0.00,normal 38977,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,173,1737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,1547,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,10,0.00,0.00,0.00,0.00,0.38,0.12,0.00,255,10,0.04,0.27,0.93,0.00,0.00,0.00,0.07,0.00,anomaly 0,tcp,http,SF,241,3236,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,14,1.00,1.00,0.00,0.00,0.41,0.06,0.00,56,18,0.29,0.05,0.05,0.11,0.96,0.78,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,52,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,152,0.60,0.41,0.60,0.00,0.09,0.00,0.32,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,5,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,33,250,1.00,0.00,0.03,0.01,0.00,0.00,1.00,0.14,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1682,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,207,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,4763,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,160,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,44,27,0.18,0.09,0.18,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,11,121,1.00,0.00,0.09,0.07,0.00,0.00,1.00,0.60,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S1,274,2920,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.67,0.00,0.00,1.00,0.00,0.67,168,255,1.00,0.00,0.01,0.02,0.01,0.01,0.01,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,77,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,20,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 16513,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.62,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,372,415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.50,0.25,0.00,0.00,1.00,0.00,0.75,19,255,1.00,0.00,0.11,0.02,0.05,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,19,1.00,1.00,0.00,0.00,0.18,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,2526,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,117,0.46,0.02,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,29,0.30,0.05,0.33,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,316,1382,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,1571,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,18,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,18,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,278,563,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,6,255,1.00,0.00,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10946,tcp,telnet,SF,109,3245,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,8,0.30,0.15,0.04,0.00,0.04,0.12,0.00,0.00,normal 0,tcp,ftp_data,SF,1010,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,43,0.09,0.06,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,82,0.88,0.06,0.88,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,1625,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,229,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,25,0.00,0.00,0.00,0.00,1.00,0.00,0.16,220,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,2402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,40,0.00,0.00,0.00,0.00,1.00,0.00,0.08,86,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,18,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,48,98,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,3,73,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 2349,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.65,0.94,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1996,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,3,1.00,0.00,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,49,0.94,0.12,1.00,0.10,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,19,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,25,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,319,1551,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.09,0.09,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.05,0.09,0.01,0.00,0.00,normal 0,tcp,http,SF,370,203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,33,0.00,0.00,0.04,0.03,1.00,0.00,0.12,146,158,1.00,0.00,0.01,0.03,0.01,0.01,0.01,0.01,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,86,0.89,0.05,0.89,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,13,94,1.00,0.00,0.08,0.31,0.00,0.00,1.00,1.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.07,0.00,0.00,1.00,0.97,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,233,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,3,1.00,1.00,0.00,0.00,0.08,0.15,0.00,255,17,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,178,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,154,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,anomaly 0,tcp,http,SF,295,12771,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,183,0.00,0.00,0.00,0.00,1.00,0.00,0.00,183,183,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,10,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,208,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,8,1.00,1.00,0.00,0.00,0.18,0.11,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,10,1.00,1.00,0.00,0.00,0.32,0.10,0.00,255,62,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,748,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,233,130,0.48,0.03,0.00,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,197,1363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,20,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1481,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,9,0.09,0.79,0.01,0.22,0.00,0.00,0.72,0.22,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,14,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,1,0.01,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.52,0.00,0.00,0.00,0.00,0.47,1.00,anomaly 0,tcp,time,S3,1,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,19,19,1.00,0.00,0.05,0.00,0.05,0.05,0.00,0.00,normal 0,tcp,http,SF,366,1644,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,221,4951,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,159,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,19,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,246,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,83,0.33,0.07,0.35,0.00,0.02,0.05,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,156,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,174,7737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,15,15,1.00,0.00,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,216,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,62,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 4,udp,domain_u,SF,46,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,13,0.00,0.00,0.00,0.00,0.25,0.25,0.23,162,156,0.96,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,8,1.00,1.00,0.00,0.00,0.04,0.05,0.00,176,8,0.05,0.07,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,484,484,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,85,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,2531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,139,139,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,1,0.00,0.00,0.00,0.00,0.06,0.18,0.00,255,1,0.00,0.38,0.67,0.00,0.16,0.00,0.18,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,13341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,226,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,42,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,17,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,SF,10,37,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,1,14,1.00,0.00,1.00,0.21,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,63,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2586,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.86,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,70,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,86,0.01,0.00,0.01,0.00,0.98,0.03,0.00,255,86,0.34,0.02,0.34,0.00,0.00,0.00,0.50,0.00,anomaly 0,tcp,smtp,SF,687,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,156,0.59,0.03,0.00,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,213,1400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,2263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,23,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,107,424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,3,1,0.00,0.00,0.33,1.00,0.33,0.67,0.00,24,5,0.21,0.17,0.04,0.00,0.00,0.00,0.08,0.40,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,11,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,280,18968,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,146,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,9,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,366,9979,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,39,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,16,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,8,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,251,272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 13,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,239,0.94,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,22,1.00,1.00,0.00,0.00,0.16,0.04,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,140,17,0.12,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,19,1.00,1.00,0.00,0.00,0.21,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1356,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,57,164,0.54,0.05,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,111,0.44,0.02,0.44,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,350,590,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,20,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2764,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,200,135,0.56,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,57,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,57,0.22,0.04,0.22,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,884,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,6,0.86,0.29,0.86,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,262,2539,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,128,239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,78,0.23,0.67,0.01,0.03,0.00,0.00,0.62,0.00,normal 0,tcp,http,SF,465,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,7610,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,35,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,211,356,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,smtp,SF,1518,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,62,0.86,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,9,1.00,1.00,0.00,0.00,0.36,0.12,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,93,0.96,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,83,1.00,0.00,0.33,0.14,0.00,0.00,1.00,1.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,13,1.00,1.00,0.00,0.00,0.37,0.11,0.00,255,65,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,16,1.00,1.00,0.00,0.00,0.22,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6,tcp,telnet,SF,104,1554,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,14,0.00,0.00,1.00,1.00,0.09,0.05,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,124,0.49,0.02,0.49,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,18,1.00,1.00,0.00,0.00,0.13,0.04,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,2839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,197,1,0.01,0.50,0.50,0.00,0.00,0.00,0.50,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,100,8,0.08,0.10,0.01,0.00,0.86,1.00,0.01,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,18,1.00,1.00,0.00,0.00,0.16,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,217,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,207,2091,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,125,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,252,1,0.00,0.12,0.10,0.00,0.00,0.00,0.10,1.00,anomaly 0,tcp,http,SF,149,3177,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,48,91,0.50,0.08,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,67,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,177,32,0.18,0.02,0.18,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,206,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,60,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,207,708,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,9,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7767,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,32,0.17,0.05,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,1778,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,162,2778,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,10597,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,17,1.00,0.00,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,4367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,230,3,0.01,0.07,0.00,0.00,0.94,1.00,0.00,0.00,anomaly 0,tcp,other,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,1,0.07,0.00,0.00,0.00,0.07,0.29,0.00,173,1,0.01,0.04,0.20,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.85,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,75,7,0.09,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,116,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,215,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,171,0.67,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 11338,tcp,telnet,SF,156,57238,0,0,0,0,0,1,2,0,0,2,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,43,0.17,0.05,0.00,0.00,0.41,0.16,0.05,0.12,normal 0,tcp,http,SF,153,35215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,8,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,317,2491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 4852,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,2,0.22,0.67,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,900,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,186,0.75,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,8,255,1.00,0.00,0.12,0.13,0.00,0.00,1.00,0.99,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,10,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,240,866,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,97,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 15,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.67,0.66,0.00,0.00,0.00,0.66,1.00,anomaly 28,tcp,ftp,SF,991,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,47,0.18,0.02,0.00,0.00,0.00,0.00,0.06,0.13,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,13,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1146,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,129,0.50,1.00,0.50,0.02,0.00,0.02,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,16,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,67,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,262,926,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,13,1.00,1.00,0.00,0.00,0.07,0.08,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,5,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,344,7333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,1040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,35,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,257,87461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,34,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,248,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,165,42,0.25,0.02,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,6,1.00,0.00,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,169,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,1,0.00,0.00,0.00,0.00,0.07,0.14,0.00,255,21,0.08,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 21846,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,607,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,68,0.30,0.02,0.30,0.00,0.00,0.00,0.04,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,4,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,13,1.00,1.00,0.00,0.00,0.27,0.12,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,1,0.00,0.72,0.36,0.00,0.02,0.00,0.62,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,137,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 2,tcp,IRC,SF,84,18,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,7,0.10,0.03,0.01,0.00,0.00,0.00,0.07,0.71,normal 0,tcp,http,SF,272,3373,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,66,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,11,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,92,0.36,0.03,0.36,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,3252,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,21,0.00,0.05,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,10180,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,161,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,168,2944,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,133,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,351,725,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,268,279,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,634,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,255,1.00,0.00,0.01,0.07,0.00,0.01,0.00,0.00,normal 571,tcp,telnet,SF,477,2196,0,0,0,0,0,1,7,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,21,0.23,0.03,0.01,0.10,0.00,0.05,0.00,0.00,normal 2,tcp,ftp,SF,1263,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,80,0.32,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,4,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.26,0.23,0.00,0.00,0.00,0.24,1.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,84,0.33,0.02,0.33,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,SF,317,596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,44324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4280,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,2,0.02,0.65,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,103,1,0.01,0.54,0.53,0.00,0.06,0.00,0.51,1.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,8,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,222,1461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,126,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,21,21,1.00,0.00,0.05,0.00,0.05,0.05,0.95,0.95,anomaly 0,tcp,http,SF,295,588,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,171,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,11,1.00,1.00,0.00,0.00,0.14,0.08,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,72,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,276,6052,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,101,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,655,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,88,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,15,1.00,1.00,0.00,0.00,0.28,0.07,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,289,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,371,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,21,0.00,0.00,0.00,0.00,0.44,0.08,0.00,255,87,0.34,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,283,809,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,131,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,1331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,252,258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,10,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,30,0.12,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,11,1.00,1.00,0.00,0.00,0.07,0.08,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,23,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,12,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1079,371,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,225,162,0.64,0.01,0.00,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,225,544,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,208,1626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,9,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,9,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,5,1.00,1.00,0.00,0.00,0.26,0.11,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,2985,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,23,0.00,0.00,0.00,0.00,1.00,0.00,0.22,61,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,29200,2920,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.75,0.75,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,24,1.00,1.00,0.00,0.00,0.24,0.04,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.10,0.00,0.00,1.00,0.00,0.20,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,97,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,2302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,29,0.04,0.07,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 22,tcp,ftp,SF,323,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,13,0.15,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,10,1.00,1.00,0.00,0.00,0.22,0.09,0.00,128,33,0.25,0.03,0.03,0.06,0.98,0.91,0.00,0.00,anomaly 3,tcp,smtp,SF,12910,1372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,146,0.70,0.05,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,14,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,3915,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,10,2,0.10,1.00,0.10,1.00,0.00,0.00,0.90,1.00,anomaly 0,tcp,http,SF,300,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.31,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1437,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,62,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2162,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,70,166,0.64,0.07,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,1899,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2182,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,142,0.55,0.07,0.01,0.01,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,758,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,161,146,0.54,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,9,1.00,0.00,1.00,0.22,0.00,0.00,0.00,0.00,anomaly 5044,tcp,ftp_data,SF,5131424,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,39,1.00,0.00,1.00,0.13,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,165,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,74,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,11111,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,314,476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.03,0.03,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,147,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,0.00,0.00,0.00,0.00,0.40,0.60,0.00,149,2,0.01,0.05,0.03,0.00,0.01,0.00,0.00,0.00,anomaly 0,tcp,http,SF,247,171,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.33,0.20,0.00,0.20,1.00,0.00,0.40,10,255,1.00,0.00,0.10,0.05,0.10,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,13,1.00,1.00,0.00,0.00,0.15,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2192,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,248,0.97,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,588,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1116,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,125,0.40,0.08,0.01,0.02,0.01,0.02,0.00,0.00,normal 0,tcp,smtp,SF,1338,412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,165,0.69,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2315,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,121,0.43,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,363,363,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,970,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.05,0.00,0.00,0.55,0.00,0.01,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,145,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,738,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.22,0.00,0.76,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.81,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,9,1.00,1.00,0.00,0.00,0.08,0.07,0.00,173,9,0.05,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,12922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,16,1.00,1.00,0.00,0.00,0.46,0.14,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,360,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,15,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,82,0.47,0.02,0.47,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,165,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,2168,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,39,2,0.03,1.00,0.03,1.00,0.00,0.00,0.95,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,17,0.07,0.02,0.07,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S1,145,13236,0,0,0,0,0,1,31,1,2,38,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,29,10,0.28,0.10,0.03,0.20,0.07,0.20,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,10,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,487,487,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,129,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,234,808,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,217,6763,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,256,8708,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,0.10,44,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,106,0.42,0.02,0.42,0.00,0.01,0.00,0.02,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,7240,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,268,9518,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,148,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,987,359,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,140,0.60,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,7,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,27,0.11,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,49,1.00,0.00,1.00,0.14,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,320,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,19,0.00,0.00,0.00,0.00,1.00,0.00,0.26,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,218,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,35195,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,1,0.05,0.00,0.00,0.00,0.05,0.76,0.00,255,1,0.00,0.07,0.46,0.00,0.00,0.00,0.00,0.00,normal 8,tcp,http_443,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.79,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,22,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,3749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,21761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,7,0.00,0.00,0.00,0.00,0.50,0.14,0.00,255,35,0.14,0.54,0.49,0.00,0.16,0.00,0.36,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,11,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,338,10311,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 37728,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,195,1.00,0.00,1.00,0.23,0.00,0.01,1.00,0.99,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,240,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,616,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,141,0.55,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,285,812,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,143,9578,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,59,255,1.00,0.00,0.02,0.06,0.03,0.01,0.02,0.01,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,193,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,176,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,148,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 17964,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,249,0.98,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,18,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,17,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,257,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.21,0.00,0.00,1.00,1.00,normal 0,tcp,ftp_data,SF,4316,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,105,51,0.49,0.05,0.49,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2381,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,190,0.76,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,5280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,252,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 2217,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,2,0.02,0.58,0.86,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,239,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,26,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,419,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,4,4,1.00,0.00,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,277,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,ftp_data,SF,74,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,63,0.25,0.02,0.05,0.00,0.72,0.78,0.00,0.00,normal 0,tcp,http,SF,257,418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,229,184,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,1.00,1.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,131,1.00,0.00,1.00,0.28,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.67,183,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,272,15626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,178,0.95,0.02,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,297,543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,155,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,239,1,0.00,0.32,0.30,0.00,0.00,0.00,0.30,1.00,anomaly 0,tcp,http,SF,203,983,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,183,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,5,0.36,0.14,0.36,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,15,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,312,422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,4962,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,63,255,1.00,0.00,0.02,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,19,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6,tcp,smtp,SF,1470,414,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,73,0.78,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,1596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,261,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,220,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,19,1.00,1.00,0.00,0.00,0.08,0.04,0.00,40,19,0.47,0.08,0.03,0.00,0.95,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,6,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,13,1.00,1.00,0.00,0.00,0.30,0.14,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,111,215,1.00,0.00,0.01,0.03,0.00,0.00,1.00,1.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,6,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,7,0.05,0.04,0.01,0.00,0.01,0.14,0.00,0.00,normal 2,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,383,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,8,0.00,0.00,1.00,1.00,0.06,0.08,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S1,214,1460,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.10,0.10,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.05,0.02,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,217,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,960,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,17,0.00,0.00,0.00,0.00,1.00,0.00,0.24,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.93,1.00,anomaly 0,udp,domain_u,SF,43,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,1849,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,436,436,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,26,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,227,1.00,0.00,0.25,0.15,0.00,0.00,1.00,0.87,normal 0,udp,domain_u,SF,45,142,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,212,0.00,0.00,0.00,0.00,1.00,0.01,0.00,102,69,0.68,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 70,tcp,telnet,SF,175,15165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,1,0.01,0.04,0.01,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,11283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,6406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,1373,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,19,0.00,0.05,0.00,0.00,1.00,0.00,0.42,51,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.16,0.00,0.84,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.01,0.00,0.14,0.00,0.86,1.00,anomaly 0,tcp,http,SF,335,18840,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,2651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.33,0.33,0.00,0.00,1.00,0.00,0.50,152,255,1.00,0.00,0.01,0.01,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,219,2963,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,141,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,446,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,255,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,7,0.00,0.00,0.00,0.00,0.16,0.05,0.29,255,30,0.12,0.01,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,700,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,110,129,0.58,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 2,tcp,ftp,SF,1233,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,120,0.47,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,231,655,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,289,765,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,175,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,307,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,3,0.75,0.50,0.75,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,33,0.13,0.02,0.13,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,6,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.00,0.00,0.12,0.25,0.00,255,204,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,206,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,2622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,32,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,904,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,24,161,0.62,0.17,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,8,141,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,5,0.08,0.08,0.02,0.40,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,519,9166,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,988,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,117,145,0.76,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.15,0.00,0.85,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.12,0.00,0.88,1.00,anomaly 0,udp,domain_u,SF,44,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,229,179,0.78,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,131,1.00,0.00,1.00,0.18,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,1630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,228,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2171,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,126,0.46,0.03,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,8415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,330,1,0.06,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.89,1.00,anomaly 1,tcp,smtp,SF,92994,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,113,246,0.97,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.05,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.92,1.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,8,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,8,0.03,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,8,1.00,1.00,0.00,0.00,0.03,0.04,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,2542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,143,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,104,0.41,0.03,0.41,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,633,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,44,0.00,0.00,0.00,0.00,1.00,0.00,0.16,97,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,188,733,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,358,11355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,120,1,0.01,0.61,0.60,0.00,0.05,0.00,0.58,1.00,anomaly 0,tcp,auth,SF,13,39,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.80,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,39,0.35,0.08,0.35,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,756,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,37,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.01,0.00,0.00,0.19,0.07,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,80,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,6480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,178,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,91,1.00,0.00,1.00,0.43,0.00,0.00,0.00,0.00,normal 20,tcp,ftp,SF,245,774,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,61,0.26,0.30,0.00,0.00,0.00,0.00,0.28,0.02,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,18,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,69,0.27,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,1.00,1.00,0.00,0.00,1.00,0.00,0.00,66,12,0.09,0.06,0.02,0.17,1.00,0.50,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,21,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,1920,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,5415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,7333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,197,22,0.11,0.03,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,23,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,1115,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1132,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,206,0.86,0.06,0.02,0.01,0.00,0.00,0.02,0.05,normal 4,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,53,0.21,0.35,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,85,0.82,0.27,0.82,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,85,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,250,608,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,50,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,9,0.00,0.00,0.00,0.00,0.17,0.04,0.00,226,9,0.04,0.02,0.05,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,2,0.70,0.50,0.30,0.50,0.01,0.38,0.00,255,2,0.01,0.22,0.59,0.00,0.42,0.50,0.18,0.50,anomaly 0,tcp,http,SF,264,1446,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3779,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,1,0.00,0.00,0.00,0.00,0.09,0.18,0.00,255,3,0.01,0.58,0.85,0.00,0.00,0.00,0.00,0.00,normal 13,tcp,smtp,SF,1676,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,110,0.61,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.26,0.00,0.74,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.18,0.00,0.82,1.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,257,3085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,319,0,0,0,0,0,0,1,0,0,0,2,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,54,0.10,0.10,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1103,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,95,0.52,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 25,tcp,telnet,SF,134,1004,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,21,0.19,0.04,0.01,0.00,0.00,0.00,0.02,0.10,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,14,1.00,0.00,0.20,0.14,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,2,0.00,0.00,0.00,0.00,0.15,0.15,0.00,255,29,0.11,0.51,0.55,0.00,0.03,0.00,0.43,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,21,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,589,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2615,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,255,14,0.05,0.68,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,21,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,2474,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,29,0.00,0.00,0.00,0.00,1.00,0.00,0.21,250,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 590,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,1905,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,39,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,16,1.00,1.00,0.00,0.00,0.21,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,573,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,45,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,172,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,7,0.17,0.07,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,3783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,920,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,314,5422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,24,0.00,0.00,0.00,0.00,1.00,0.00,0.17,246,246,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,9833,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,42,0.00,0.00,0.04,0.02,1.00,0.00,0.10,58,255,1.00,0.00,0.02,0.01,0.00,0.00,0.02,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,20,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,16,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,276,345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,8,0.07,0.04,0.01,0.25,0.01,0.12,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,109,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,7197,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,344,10714,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,106,1.00,0.00,0.06,0.09,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,360,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 14,tcp,telnet,SF,140,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,4,1.00,0.00,1.00,0.75,0.00,0.00,0.00,0.25,normal 0,tcp,http,SF,200,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,10,0.00,0.00,1.00,1.00,0.20,0.08,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,1.00,1.00,0.00,0.00,1.00,0.00,0.00,69,15,0.13,0.06,0.03,0.13,1.00,0.60,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12571,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.64,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.33,0.00,255,244,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,655,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,766,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,81,126,0.47,0.05,0.01,0.02,0.00,0.00,0.01,0.02,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,186,4841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,53,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.01,normal 0,udp,domain_u,SF,45,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,152,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,300,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,74,0.44,0.04,0.44,0.00,0.01,0.00,0.38,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,20,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,212,728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,107,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,1487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.03,0.03,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,259,5170,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,17,0.07,0.71,0.07,0.00,0.03,0.00,0.57,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,17,0.07,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,154,0.60,0.01,0.60,0.00,0.00,0.00,0.00,0.00,anomaly 3980,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.62,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,13,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,195,1254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 20,tcp,ftp,SF,233,770,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,52,0.22,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,11600,1431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,178,0.69,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,176,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,66,0.89,0.03,0.89,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,225,0.91,0.18,0.91,0.01,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,125,236,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,88,0.29,0.70,0.01,0.02,0.00,0.00,0.64,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,2,0.00,0.00,1.00,1.00,0.14,0.50,0.00,184,2,0.01,0.05,0.08,0.00,0.01,0.00,0.34,1.00,anomaly 0,tcp,http,SF,336,1352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,75,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,1,0.12,0.00,0.88,1.00,0.02,1.00,0.00,255,1,0.00,0.51,0.00,0.00,0.03,0.00,0.22,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,1.00,1.00,0.00,0.00,0.50,1.00,0.00,162,45,0.25,0.02,0.01,0.04,1.00,0.91,0.00,0.00,anomaly 10,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,12,0.86,0.21,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,93,0.50,0.04,0.50,0.00,0.01,0.00,0.34,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,5,1.00,1.00,0.00,0.00,0.20,0.08,0.00,255,5,0.02,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,2516,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,344,344,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,31,0.12,0.01,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,1157,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,114,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,9,1.00,0.00,1.00,0.33,0.00,0.00,0.00,0.00,anomaly 23,tcp,ftp,SF,227,765,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,61,0.24,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,13,0.00,0.00,1.00,1.00,0.10,0.06,0.00,202,13,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,196,30427,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,5370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,5,255,1.00,0.00,0.20,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,76,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,216,2075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,15,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,727,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,15,0.23,0.09,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,1,0.01,0.00,0.91,1.00,0.01,1.00,0.00,255,1,0.00,0.42,0.00,0.00,0.00,0.00,0.38,1.00,anomaly 0,tcp,http,SF,322,322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.44,0.44,0.00,0.00,0.00,0.44,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,351,1,0.06,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.90,1.00,anomaly 0,udp,domain_u,SF,43,107,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,4,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,478,478,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,135,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10,tcp,ftp_data,SF,0,5150180,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,17,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,4,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,302,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,215,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,25,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,15,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,17,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,1,0.00,0.00,0.00,0.00,0.10,0.20,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,352,352,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 5,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 25,tcp,ftp,SF,339,1072,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,61,0.24,0.02,0.00,0.00,0.00,0.00,0.03,0.10,normal 0,udp,domain_u,SF,43,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,165,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,982,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,15121,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,26,255,1.00,0.00,0.04,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,10,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,161,15087,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,17,0.00,0.00,0.00,0.00,1.00,0.00,0.24,72,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.01,0.00,0.15,0.00,0.85,1.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,408,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,38,1.00,0.00,0.03,0.00,0.03,0.03,0.03,0.03,anomaly 36700,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,245,357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,266,771,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.09,0.09,normal 0,tcp,smtp,SF,1012,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,21,0.91,0.13,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,1247,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1020,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,185,0.64,0.27,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.02,0.02,0.01,0.00,0.00,normal 0,tcp,http,SF,333,5726,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,261,18736,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,125,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,302,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,23,0.07,0.09,0.00,0.00,1.00,0.00,0.09,134,255,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,21,1.00,1.00,0.00,0.00,0.07,0.04,0.00,147,21,0.14,0.07,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,171,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,14,1.00,1.00,0.00,0.00,0.25,0.07,0.00,219,56,0.26,0.02,0.01,0.00,0.99,0.96,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,142,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,142,0.56,0.01,0.56,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,219,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,116,0.45,0.04,0.47,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,8611,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,44,0.00,0.00,0.00,0.00,1.00,0.00,0.07,137,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 8397,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,867,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,125,0.66,0.04,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,292,2367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,4,255,1.00,0.00,0.25,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,140,0.00,0.00,0.00,0.00,0.93,0.01,0.00,255,204,0.80,0.03,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,300,13020,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,253,1.00,0.00,1.00,0.15,0.00,0.00,1.00,0.98,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,107,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,288,475,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,48,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,4297,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,0.05,52,55,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,304,2,0.00,0.00,1.00,1.00,0.01,0.50,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,234,3295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,5,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,1610,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,15,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,smtp,SF,1057,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,124,0.57,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,138,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 6192,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.60,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,232,13,0.06,0.06,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 13958,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,47,0.00,0.00,0.00,0.00,1.00,0.00,0.00,240,146,0.61,0.03,0.61,0.00,0.01,0.00,0.26,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,10,1.00,0.90,0.00,0.10,1.00,0.00,0.20,9,9,1.00,0.00,0.11,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,2514,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,11,255,1.00,0.00,0.09,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,12165,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,75,0.24,0.03,0.24,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,7,1.00,1.00,0.00,0.00,0.04,0.09,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,218,292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,68,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,5773,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,14,255,1.00,0.00,0.07,0.01,0.00,0.00,0.00,0.06,normal 0,tcp,http,SF,225,3895,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,27,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,25,1.00,1.00,0.00,0.00,0.09,0.04,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,907,2586,0,0,0,18,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,253,47,0.19,0.02,0.00,0.00,0.00,0.00,0.05,0.11,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,4,1.00,1.00,0.00,0.00,0.25,0.25,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,7877,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,3451,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,644,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,9,255,1.00,0.00,0.11,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,25,1.00,0.00,1.00,0.20,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,199,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,305,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.56,0.56,1.00,0.00,0.00,162,173,1.00,0.00,0.01,0.03,0.01,0.01,0.27,0.31,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,15,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,200,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,238,70,0.29,0.03,0.29,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,8422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,170,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 26,tcp,ftp,SF,874,2586,0,0,0,18,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,240,52,0.22,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,telnet,SF,102,1309,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,2,0.02,0.09,0.02,1.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,2,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,328,4185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,16,1.00,1.00,0.00,0.00,0.31,0.08,0.00,255,46,0.18,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,135,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,236,23401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,12,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,4326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,3,0.01,0.06,0.01,0.00,0.63,0.00,0.03,1.00,normal 12,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,4,101,1.00,0.00,0.25,0.19,0.00,0.00,1.00,1.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,17,0.00,0.00,1.00,1.00,0.16,0.08,0.00,255,5,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,50,1.00,0.00,0.02,0.00,0.02,0.02,0.02,0.02,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,9,1.00,1.00,0.00,0.00,0.18,0.08,0.00,255,49,0.19,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,19,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,45,0.13,0.01,0.13,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,125,236,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,81,0.22,0.79,0.01,0.02,0.00,0.00,0.72,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,22,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,8277,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.67,0.67,1.00,0.00,0.00,34,181,1.00,0.00,0.03,0.18,0.00,0.00,0.85,0.97,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,11,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,11,0.04,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,8769,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,160,1.00,0.00,0.33,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,56,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,56,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,56,0.22,0.01,0.22,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,109,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,13,0.00,0.00,0.00,0.00,0.19,0.06,0.00,255,37,0.15,0.23,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,236,5056,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,40,0.00,0.03,0.00,0.00,1.00,0.00,0.12,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,12,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,13,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,32,0.13,0.23,0.13,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,358,2764,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,171,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,7,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,147,38988,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,16,0.00,0.00,1.00,1.00,0.11,0.05,0.00,255,35,0.14,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,247,0.97,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,15,1.00,1.00,0.00,0.00,0.11,0.04,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,795,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,171,1,0.01,0.43,0.43,0.00,0.00,0.00,0.42,1.00,anomaly 0,tcp,ftp_data,SF,167,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,41,0.16,0.06,0.16,0.00,0.64,0.00,0.01,0.00,normal 1,tcp,smtp,SF,1874,371,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,134,0.84,0.11,0.03,0.01,0.03,0.01,0.00,0.00,normal 0,tcp,http,SF,313,1919,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,7,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,2647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,29,0.11,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.31,0.57,0.00,0.00,0.00,0.92,1.00,anomaly 0,tcp,http,SF,211,404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,16,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,36,0.14,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,214,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,227,0.89,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,10117,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,3,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 4,tcp,pop_2,SF,6,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.91,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.90,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,1,0.04,0.00,0.88,1.00,0.01,0.99,0.00,255,1,0.00,0.57,0.00,0.00,0.02,0.00,0.50,1.00,anomaly 0,tcp,http,SF,220,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,9443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,225,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1809,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,16,90,0.81,0.25,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,0.00,0.00,1.00,1.00,0.00,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,129,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,228,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,12,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,66,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,119,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,13692,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,7,0.00,0.00,1.00,1.00,0.06,0.08,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,20,1.00,1.00,0.00,0.00,0.19,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,342,659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,177,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.04,0.18,0.00,0.24,0.00,0.02,0.00,anomaly 0,tcp,ftp_data,SF,12165,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,43,0.18,0.04,0.18,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,240,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,9567,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,21,255,1.00,0.00,0.05,0.02,0.00,0.00,0.05,0.00,normal 0,tcp,http,SF,244,2202,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,33,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,1469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,47,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,7,0.00,0.00,1.00,1.00,0.13,0.08,0.00,255,7,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,34,10,0.29,0.18,0.03,0.00,0.59,1.00,0.03,0.00,anomaly 0,tcp,ftp_data,SF,15377,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,68,0.15,0.05,0.15,0.03,0.00,0.22,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,67,18,0.27,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,8970,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,90,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,210,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,113,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,305,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,1865,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,1511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,245,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,579,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,21,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,39,0.15,0.03,0.15,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7321,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,77,0.51,0.05,0.51,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1183,332,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,143,0.56,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 17903,tcp,telnet,SF,5830,122343,0,0,0,77,0,1,6,0,0,1,19,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,38,0.15,0.06,0.00,0.00,0.56,0.29,0.04,0.11,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,19,1.00,1.00,0.00,0.00,0.24,0.05,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,SF,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.91,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.88,0.00,anomaly 0,tcp,http,SF,312,1592,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,21,255,1.00,0.00,0.05,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,1.00,1.00,0.00,0.00,0.17,0.50,0.00,255,49,0.19,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 4794,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.54,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,135,1.00,0.00,0.33,0.19,0.00,0.00,1.00,0.65,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,28,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 39438,tcp,sql_net,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,15,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8,tcp,smtp,SF,1630,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,27,187,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 2,tcp,X11,SF,13684,15580,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,33,0.13,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,89,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,22,0.09,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,31639,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,52,255,1.00,0.00,0.02,0.03,0.00,0.00,0.02,0.01,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,17,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,2483,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,132,0.64,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,2,1.00,1.00,0.00,0.00,0.09,0.14,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7077,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,93,0.91,0.05,0.91,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,4,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,44,0.00,0.00,0.00,0.00,1.00,0.00,0.11,86,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,17,219,1.00,0.00,0.06,0.16,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,318,2435,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,5,1.00,1.00,0.00,0.00,0.31,0.25,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 6285,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.66,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,2,0.78,1.00,0.22,0.00,0.02,0.37,0.00,255,2,0.01,0.12,0.33,0.00,0.25,1.00,0.07,0.00,anomaly 21,tcp,ftp,SF,238,772,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,29,0.37,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,926,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,97,0.38,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,14,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,124,1.00,0.00,1.00,0.44,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,25,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,17,1.00,1.00,0.00,0.00,0.18,0.07,0.00,204,17,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1699,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,38,0.15,0.05,0.15,0.00,0.43,0.00,0.02,0.00,normal 0,tcp,smtp,SF,810,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,195,0.67,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,944,2720,0,0,0,19,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,21,0.36,0.09,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,54540,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,18,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1220,3380,0,0,0,24,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,28,0.12,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,206,104,0.30,0.01,0.30,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,289,8760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,29,0.05,0.03,0.00,0.00,1.00,0.00,0.07,20,255,1.00,0.00,0.05,0.05,0.05,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,75,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,150,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,1472,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,19,1.00,0.00,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,450,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,23,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 9,tcp,ftp_data,SF,0,5149533,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,14,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,7,1.00,0.00,1.00,0.57,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,172,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,110,0.43,0.03,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,22,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,190,1611,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,28,0.00,0.00,0.00,0.04,1.00,0.00,0.07,39,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,6014,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,3,1.00,0.00,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,12,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,2135,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,11,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,3503,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,32,0.00,0.00,0.00,0.00,1.00,0.00,0.12,81,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,238,22,0.09,0.02,0.00,0.00,0.00,0.00,0.04,0.18,normal 0,tcp,http,SF,189,18004,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,70,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,1109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 33,tcp,ftp,SF,1468,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,8,0.67,0.25,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,104,6,0.06,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,182,686,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,18942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,21,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,71,0.64,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,2,1.00,1.00,0.00,0.00,0.05,0.14,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,256,9621,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,361,1256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,60,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 1,tcp,http,S2,303,1381,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.02,0.02,0.00,0.00,normal 6565,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,3,0.03,0.60,0.85,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,88,59,0.10,0.07,0.10,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,3518,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,remote_job,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,230,241,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,39,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,92,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,233,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,165,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,32,2,0.03,1.00,0.03,1.00,0.00,0.00,0.91,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,12,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9505,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.56,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,948,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,188,0.74,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.50,1.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,0.85,0.00,0.00,0.00,1.00,0.00,0.00,normal 0,tcp,http,SF,277,987,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,9,1.00,1.00,0.00,0.00,0.24,0.11,0.00,119,32,0.24,0.03,0.03,0.06,0.98,0.91,0.00,0.00,anomaly 0,udp,domain_u,SF,44,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,300,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,262,360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,20,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,7,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,137,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,202,0.79,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,438,3110,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,361,858,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,112,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,8865,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,11250,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,83,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,142,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,1,0.01,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.51,0.01,0.00,0.00,0.00,0.46,1.00,anomaly 0,tcp,http,SF,147,34193,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,206,255,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,155,0.61,0.02,0.61,0.00,0.01,0.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 2207,tcp,IRC,RSTR,322,2794,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.12,1.00,0.12,0.25,0.00,143,21,0.15,0.02,0.01,0.00,0.00,0.00,0.10,0.71,normal 0,tcp,http,SF,236,18275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,20,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7077,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,53,0.55,0.20,0.55,0.04,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,0.84,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,1438,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,48,0.33,0.02,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,remote_job,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,9,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,8,0.57,0.21,0.57,0.00,0.07,0.12,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,240,0.00,0.00,0.00,0.00,1.00,0.00,0.00,240,240,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.46,0.81,0.00,0.00,0.00,0.00,0.00,normal 4080,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.77,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,20,0.00,0.00,1.00,1.00,0.15,0.07,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,6,255,1.00,0.00,0.17,0.12,0.00,0.00,1.00,0.78,normal 0,tcp,http,SF,255,303,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,160,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,881,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,82,60,0.73,0.02,0.01,0.00,0.00,0.00,0.73,1.00,normal 0,tcp,http,SF,310,960,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.16,0.00,0.82,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.18,0.00,0.82,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,3,1.00,1.00,0.00,0.00,0.27,0.27,0.00,251,63,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,26088,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,167,657,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,5,255,1.00,0.00,0.20,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,33,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,65,0.34,0.03,0.34,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,14,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,223,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,1918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,2585,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,147,237,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,83,0.00,0.00,0.00,0.00,0.69,0.05,0.00,255,140,0.55,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1195,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,51,0.20,0.06,0.00,0.00,0.56,0.00,0.01,0.00,normal 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 6,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,2982,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,2,82,1.00,0.00,0.50,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,7,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,188,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1574,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.67,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,8263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,23,255,1.00,0.00,0.04,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,155,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,181,181,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,smtp,SF,1361,489,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,217,137,0.49,0.01,0.00,0.01,0.92,0.73,0.00,0.00,normal 0,tcp,http,SF,213,10431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,278,5131,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.07,0.07,1.00,0.00,0.00,242,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,20,0.06,0.05,0.00,0.00,1.00,0.00,0.10,16,255,1.00,0.00,0.06,0.05,0.06,0.02,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,23,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,23,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5041,tcp,ftp_data,SF,0,5131424,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.02,0.00,0.00,0.75,0.85,0.00,0.00,normal 0,tcp,smtp,SF,1163,489,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,121,0.47,0.02,0.00,0.00,0.47,0.50,0.00,0.00,normal 0,tcp,http,SF,201,1464,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,54,0.00,0.00,0.00,0.00,1.00,0.00,0.04,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.08,0.00,0.00,1.00,0.84,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,11,1.00,1.00,0.00,0.00,0.44,0.20,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,7466,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,266,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,3016,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,116,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,58,0.23,0.07,0.29,0.00,0.00,0.02,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,22,1.00,1.00,0.00,0.00,0.30,0.07,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,255,1,0.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,1412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,6406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,164,430,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,0.27,16,255,1.00,0.00,0.06,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,10010,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,4,255,1.00,0.00,0.25,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,814,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,165,208,0.81,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,1721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,119,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,733,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,12,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,0.69,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,10554,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,143,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,8,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,28,0.11,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1299,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,142,142,0.70,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,358,256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,176,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1486,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,14,0.47,0.17,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,63,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,7,0.00,0.01,0.00,0.29,0.95,0.00,0.00,0.00,normal 4,tcp,smtp,SF,2936,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,113,0.44,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 190,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.64,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,10,1.00,1.00,0.00,0.00,0.08,0.07,0.00,174,10,0.06,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,110,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,339,2873,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,1478,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,148,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,197,315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,20,1.00,1.00,0.00,0.00,0.49,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,1319,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,42,0.00,0.00,0.00,0.00,1.00,0.00,0.05,16,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,8,0.00,0.00,0.00,0.00,0.19,0.09,0.00,255,18,0.07,0.61,0.42,0.00,0.16,0.00,0.42,0.00,anomaly 0,tcp,http,SF,218,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 21,tcp,ftp,SF,231,769,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,15,0.13,0.67,0.01,0.13,0.00,0.00,0.61,0.13,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,53,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4550,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.56,0.85,0.00,0.00,0.00,0.00,0.00,normal 30,tcp,ftp,SF,1047,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,199,35,0.18,0.04,0.01,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,224,4125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2504,475,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.02,0.00,0.00,0.00,0.00,0.80,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,24,0.50,0.04,0.00,0.00,1.00,0.00,0.08,3,255,1.00,0.00,0.67,0.06,0.33,0.01,0.00,0.01,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,205,1.00,0.00,0.17,0.19,0.00,0.00,1.00,1.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.84,0.82,0.00,0.00,0.00,0.82,1.00,anomaly 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,4,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,1.00,0.50,0.00,0.00,1.00,0.00,0.75,144,127,0.43,0.01,0.01,0.02,0.99,0.49,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,18,1.00,1.00,0.00,0.00,0.24,0.05,0.00,255,47,0.18,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 29,tcp,ftp,SF,1504,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,20,0.11,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,312,1078,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,105,164,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 1540,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.53,0.87,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,269,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,2193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.07,0.00,0.02,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,86082,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.50,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,13,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 11,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,16,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,16,0.06,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,26408,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,15,0.31,0.06,0.31,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,15,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,184,1619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,231,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,17,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,147,376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,255,1.00,0.00,0.01,0.02,0.00,0.00,0.14,0.33,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,130,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,32,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,27,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,210,1659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.02,0.09,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,2,1.00,1.00,0.00,0.00,0.22,0.44,0.00,171,45,0.26,0.02,0.01,0.04,0.99,0.93,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,191,2529,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,3,255,1.00,0.00,0.33,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,940,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,1263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,1840,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,2019,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,249,223,0.90,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,22,2,0.09,0.73,0.64,0.00,0.64,1.00,0.00,0.00,anomaly 0,tcp,http,SF,349,343,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,7,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,2,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,224,832,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,34,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,55,0.03,0.12,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,6,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 7,tcp,smtp,SF,1401,494,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,12,0.05,0.02,0.00,0.00,0.00,0.00,0.04,0.00,normal 0,tcp,http,SF,190,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1647,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,166,159,0.46,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,15281,1361,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,213,0.64,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,14029,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,218,214,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3888,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,69,1.00,0.00,1.00,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,477,1,0.07,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,238,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.40,0.50,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,anomaly 0,tcp,http,SF,191,604,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,36,1.00,0.00,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,182,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,29,253,1.00,0.00,0.03,0.22,0.00,0.00,1.00,1.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,18,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1996,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,158,0.74,0.11,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,42,0.37,0.04,0.37,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,213,1211,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,229,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.54,normal 0,tcp,http,SF,344,28707,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,520,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,25,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,24,1.00,1.00,0.00,0.00,0.32,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,54,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,1323,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,179,0.96,0.04,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,3,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,306,1249,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,129,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,5,1.00,1.00,0.00,0.00,0.42,0.17,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,2249,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1690,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,92,0.91,0.05,0.91,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1690,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,29,0.24,0.27,0.47,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,413,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,http,SF,325,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,183,183,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,22,1.00,1.00,0.00,0.00,0.31,0.06,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,37,213,1.00,0.00,0.03,0.16,0.00,0.00,1.00,1.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,12,0.00,0.00,0.00,0.00,0.23,0.04,0.00,255,28,0.11,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,35,208,1.00,0.00,0.03,0.18,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,311,311,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,77,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,246,692,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 15,tcp,smtp,SF,992,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,120,0.74,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,2280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,105,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,5,0.02,1.00,0.02,0.40,0.00,0.00,0.92,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,28,0.11,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,14052,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,55,0.27,0.02,0.27,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,7,0.88,1.00,0.12,0.00,0.88,0.25,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,228,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,235,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,53,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,194,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 2,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,421,2,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,158,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,158,0.62,0.01,0.62,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,210,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,54,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,62,255,1.00,0.00,0.02,0.27,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,306,1041,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,1384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,28,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.06,0.00,0.00,1.00,0.40,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,62,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,284,2358,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,91,1.00,0.00,1.00,0.48,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1691,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,2282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,193,761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,17,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,248,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,1,0.10,0.00,0.90,1.00,0.01,1.00,0.00,255,1,0.00,0.55,0.00,0.00,0.03,0.00,0.26,1.00,anomaly 0,tcp,smtp,SF,3064,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,64,0.25,0.35,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,63,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,61,0.24,0.02,0.04,0.00,0.73,0.82,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,360,3063,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 14,tcp,smtp,SF,1119,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,71,172,0.59,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1241,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,34,111,0.85,0.06,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,25,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,ftp,SF,1233,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,29,0.11,0.02,0.00,0.00,0.11,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,13599,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,4848,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,28,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,95,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1723,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,211,102,0.45,0.03,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,188,2057,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 815,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.50,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,1071,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,19,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,4624,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,10,1.00,1.00,0.00,0.00,0.27,0.11,0.00,255,27,0.11,0.06,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,29,255,1.00,0.00,0.07,0.02,0.03,0.01,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,250,248,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,20,1.00,0.00,0.50,0.25,0.00,0.00,1.00,0.95,normal 1,tcp,smtp,SF,703,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,24,0.09,0.53,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,1382,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,2,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,293,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,21,0.00,0.00,0.00,0.05,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,46,149,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,16,0.08,0.03,0.08,0.12,0.00,0.00,0.00,0.00,normal 387,tcp,telnet,SF,387,2134,0,0,0,0,0,1,9,0,0,0,0,0,0,0,0,0,150,1,0.99,0.00,0.00,0.00,0.01,0.06,0.00,255,15,0.06,0.08,0.00,0.00,0.62,0.20,0.01,0.13,normal 0,tcp,ftp_data,SF,1214,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,106,0.31,0.02,0.31,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,36,0.14,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,282,3081,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,393,1,0.07,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,http,RSTR,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.25,0.25,1.00,0.00,0.00,144,144,1.00,0.00,0.01,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,http,SF,229,4239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,32,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,480,480,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,61,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,20,0.00,0.00,1.00,1.00,0.37,0.07,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,9198,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,95,0.40,0.03,0.40,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.33,0.33,1.00,0.00,0.00,3,3,1.00,0.00,0.33,0.00,0.00,0.00,0.33,0.33,anomaly 0,tcp,http,SF,223,6727,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,1660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,4,1.00,1.00,0.00,0.00,0.11,0.11,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,1973,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1266,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,66,76,0.68,0.05,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,4173,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,262,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,4835,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,4660,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,243,0.75,0.50,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,2,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,480,1,0.08,1.00,0.89,0.00,0.00,0.95,0.00,255,1,0.00,0.92,0.00,0.00,0.10,1.00,0.90,0.00,anomaly 0,tcp,smtp,SF,1280,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,147,0.75,0.14,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,66,0.26,0.15,0.26,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,81,255,1.00,0.00,0.01,0.15,0.00,0.00,0.95,0.98,normal 0,tcp,http,SF,196,5548,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,1368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 9,tcp,smtp,SF,8845,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,156,171,0.76,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,65,1,0.02,0.85,0.88,0.00,0.88,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,2488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,170,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,646,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,237,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,2170,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,43,255,1.00,0.00,0.02,0.02,0.00,0.00,0.07,0.09,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,1.00,0.02,0.00,0.00,1.00,0.00,0.13,3,255,1.00,0.00,0.33,0.06,1.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,52,0.20,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,20,1.00,1.00,0.00,0.00,0.35,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,1,0.00,0.00,0.85,1.00,0.08,1.00,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,0.05,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,13,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,22,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,999,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,133,0.52,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,111,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,1885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,1,0.00,0.00,0.00,0.00,0.03,0.24,0.00,255,1,0.00,0.17,0.52,0.00,0.00,0.00,0.41,0.00,anomaly 0,tcp,http,SF,267,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 140,tcp,http,SF,448,549,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,16,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.02,0.80,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,18,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,7,0.00,0.00,1.00,1.00,0.12,0.07,0.00,255,7,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,207,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,2,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,79,232,1.00,0.00,0.01,0.13,0.00,0.00,0.95,0.98,normal 0,udp,domain_u,SF,44,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,218,1.00,0.00,1.00,0.16,0.00,0.00,1.00,0.92,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,8647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,17,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,17,0.07,0.02,0.07,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,509,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,164,0.64,0.16,0.64,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,274,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1613,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,142,0.64,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,78,0.40,0.02,0.40,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,17,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,7886,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,2,1.00,1.00,0.00,0.00,0.10,0.15,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,18,1.00,1.00,0.00,0.00,0.60,0.07,0.00,38,45,0.47,0.05,0.03,0.04,1.00,0.40,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,94,0.00,0.00,0.00,0.00,0.72,0.05,0.00,255,146,0.57,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,16,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,44,0.00,0.00,0.00,0.00,1.00,0.00,0.14,97,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,4753,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,21,19,0.90,0.10,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,352,1695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,6380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,75,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,1812,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,16,0.00,0.00,1.00,1.00,0.15,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,20,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,217,0.85,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.22,0.00,0.77,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.23,0.00,0.77,1.00,anomaly 0,tcp,http,SF,156,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,36,1.00,0.00,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,16904,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,584,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,26,0.10,0.53,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,265,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,1322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,1597,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,37,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 36,tcp,telnet,SF,124,11058,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.55,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,17,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,139,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,228,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,633,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,178,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,191,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,657,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,106,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,16,0.00,0.00,0.09,0.06,1.00,0.00,0.31,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,20,0.08,0.18,0.08,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 22,tcp,ftp,SF,335,1054,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,76,0.40,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,1155,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,24,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,112,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,124,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,759,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,120,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,50,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,52,22,0.42,0.10,0.02,0.00,0.96,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,17,0.15,0.06,0.15,0.00,0.02,0.00,0.57,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,43,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,43,0.17,0.02,0.17,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,6062,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,76,0.36,0.03,0.36,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,49,0.80,0.40,0.80,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1564,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,22,172,0.73,0.18,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,7939,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,122,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 13368,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,227,5220,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,114,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,3,0.01,0.01,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.00,0.00,0.12,0.25,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,58,10,0.17,0.10,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,352,1100,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,150,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,17,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,348,3804,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,18,1.00,1.00,0.00,0.00,0.25,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,0.91,0.00,0.00,0.07,0.00,0.75,1.00,anomaly 0,tcp,finger,SF,9,170,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,8,0.04,0.02,0.01,0.25,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,187,1364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,46,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,121,10,0.08,0.08,0.01,0.00,0.98,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,180,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,165,102,0.62,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1888,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,2809,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,74,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,741,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,48,0.00,0.00,0.00,0.00,1.00,0.00,0.06,26,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,357,841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,134,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,13,1.00,1.00,0.00,0.00,0.28,0.09,0.00,127,33,0.26,0.03,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1883,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,131,0.39,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,7,0.00,0.00,1.00,1.00,0.06,0.08,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,241,2224,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,86,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,42,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,111,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2735,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,201,0.79,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,2792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,5875,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,168,13175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,20,0.87,0.13,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,2013,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,51,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.20,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,41,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,1141,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 854,tcp,telnet,SF,720,24758,0,0,0,0,0,1,4,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,52,0.20,0.02,0.00,0.00,0.43,0.56,0.00,0.00,normal 0,tcp,http,SF,233,1783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,20,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.50,0.67,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.05,0.05,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,406,406,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,1.00,1.00,0.00,0.00,0.50,1.00,0.00,255,21,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,2734,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1690,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,70,0.54,0.11,0.54,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,329,3433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,86,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,86,0.34,0.01,0.34,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,307,5280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,279,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,877,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,190,0.64,0.08,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,14,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,14,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,260,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,6850,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,96,0.01,0.00,0.00,0.00,0.99,0.02,0.00,255,96,0.38,0.01,0.38,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,283,14568,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,25,0.00,0.00,0.00,0.00,1.00,0.00,0.16,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,13,1.00,1.00,0.00,0.00,0.32,0.10,0.00,255,33,0.13,0.06,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,7,0.00,0.00,1.00,1.00,0.06,0.06,0.00,10,1,0.10,0.20,0.10,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,6,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,866,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,26,255,1.00,0.00,0.04,0.03,0.04,0.00,0.00,0.00,normal 4,tcp,ftp,SF,1240,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,41,0.19,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,43,0.00,0.00,0.02,0.00,0.98,0.05,0.00,255,43,0.17,0.02,0.17,0.00,0.00,0.00,0.63,0.00,anomaly 8,tcp,smtp,SF,670,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,170,0.74,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S2,236,0,0,0,0,3,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.06,0.17,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,71,0.28,0.04,0.28,0.00,0.14,0.00,0.02,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,47,2,0.04,0.19,0.02,0.00,0.70,1.00,0.02,0.00,anomaly 0,tcp,http,SF,234,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,222,0.87,0.04,0.00,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,291,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,136,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,260,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,14,0.00,0.00,0.00,0.00,0.47,0.10,0.00,255,14,0.05,0.61,0.44,0.00,0.05,0.00,0.51,0.00,anomaly 0,tcp,http,SF,227,2173,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,24716,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,281,17449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 1213,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,63,2,0.03,0.52,0.86,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,1,1.00,1.00,0.00,0.00,0.02,0.12,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,1109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.06,0.00,0.00,0.00,0.00,normal 81,tcp,http,SF,328,189,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,11,1.00,1.00,0.00,0.00,0.35,0.13,0.00,255,65,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,189,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,96,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,250,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,4509,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,26,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1970,401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,92,156,0.76,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,16,0.06,0.02,0.06,0.00,0.00,0.00,0.73,0.00,anomaly 0,tcp,http,SF,221,1968,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,21,0.13,0.04,0.13,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,16,1.00,1.00,0.00,0.00,0.08,0.05,0.00,139,16,0.12,0.08,0.01,0.00,0.90,1.00,0.01,0.00,anomaly 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,98,0.14,0.07,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,231,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,3125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,106,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,3261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,44,2,0.02,1.00,0.02,1.00,0.00,0.00,0.91,1.00,anomaly 0,tcp,http,SF,159,21375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,38,0.00,0.00,0.00,0.00,1.00,0.00,0.16,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,16,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,299,3991,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,52,0.05,0.02,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,13,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2621,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,63,120,0.29,0.05,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,743,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,26,0.00,0.00,0.00,0.00,1.00,0.00,0.12,7,255,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2157,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,132,0.52,0.01,0.00,0.00,0.74,0.76,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,12,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,55,0.20,0.20,0.20,0.04,0.00,0.02,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,9518,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,148,13023,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,30,0.50,0.03,0.00,0.00,1.00,0.00,0.07,181,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,8,255,1.00,0.00,0.12,0.13,0.00,0.00,1.00,0.79,normal 18888,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,2,0.01,0.46,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,248,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 13,tcp,smtp,SF,991,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,149,0.74,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,234,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,709,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,84,184,0.73,0.07,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,24,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,813,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,126,92,0.73,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,233,540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,204,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,219,0.00,0.00,0.00,0.00,1.00,0.00,0.00,216,122,0.56,0.03,0.56,0.00,0.01,0.00,0.29,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,445,445,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,44,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,192,22691,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,1,0.01,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.31,0.00,0.00,0.00,0.00,0.27,1.00,anomaly 0,tcp,ftp_data,SF,201,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,70,0.19,0.76,0.18,0.03,0.00,0.00,0.70,0.01,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,190,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,216,2531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,105,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,17,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.04,0.04,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,6,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,255,1.00,0.00,0.01,0.01,0.00,0.01,0.00,0.00,normal 7,tcp,smtp,SF,882,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,157,144,0.51,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,29,0.11,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12286,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,40,0.24,0.07,0.24,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,673,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1139,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.02,0.04,0.00,0.66,0.75,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,18,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,20,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,60,0.24,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,14,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,22,1.00,1.00,0.00,0.00,0.16,0.04,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,195,9,0.05,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,196,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,247,1.00,0.00,0.12,0.13,0.00,0.00,1.00,0.75,normal 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,5,0.00,0.00,0.00,0.00,0.83,0.33,0.00,255,24,0.09,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,1,0.00,0.00,0.00,0.00,0.06,0.18,0.00,255,1,0.00,0.53,0.50,0.00,0.16,0.00,0.35,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,90,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,90,0.35,0.01,0.35,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,10073,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,65,0.42,0.03,0.42,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,1252,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,23,255,1.00,0.00,0.04,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,9,0.00,0.00,1.00,1.00,0.08,0.07,0.00,186,9,0.05,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,289,4894,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,222,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,175337,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,82,0.32,0.03,0.32,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 151,tcp,http,SF,310,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,90,255,1.00,0.00,0.01,0.07,0.00,0.00,0.02,0.02,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,6,1.00,1.00,0.00,0.00,0.29,0.19,0.00,255,41,0.16,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1879,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,138,0.54,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,13239,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,206,29,0.14,0.03,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,26,0.10,0.05,0.13,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,339,993,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,279,0.00,0.00,0.00,0.00,1.00,0.00,0.01,122,200,0.88,0.02,0.88,0.01,0.00,0.00,0.09,0.00,normal 26,tcp,ftp,SF,341,1072,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,56,0.22,0.02,0.00,0.00,0.00,0.00,0.03,0.11,normal 0,tcp,http,SF,301,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,90,0.97,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.01,0.95,0.00,0.00,0.00,0.04,0.00,anomaly 0,udp,domain_u,SF,45,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,280,0.00,0.00,0.00,0.00,1.00,0.01,0.00,246,211,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,1061,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,1,0.00,0.00,0.95,1.00,0.05,1.00,0.00,139,1,0.01,0.25,0.01,0.00,0.00,0.00,0.17,1.00,anomaly 0,tcp,http,SF,155,1009,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 32,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,14,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,353,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,2719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,16904,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,165,20,0.12,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2766,476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,12,0.05,0.02,0.00,0.00,0.00,0.00,0.04,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,27,0.32,0.07,0.32,0.00,0.00,0.00,0.01,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,107,0.42,0.02,0.42,0.00,0.01,0.00,0.02,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,169,118,0.70,0.02,0.01,0.00,0.00,0.00,0.70,1.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.07,0.00,0.00,1.00,0.91,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,81,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 1,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,3,0.04,0.09,0.02,0.67,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,1709,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,0.14,96,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,354,361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 7787,tcp,telnet,SF,3862,17237,0,0,0,0,0,1,2,0,0,2,18,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,77,0.30,0.02,0.00,0.00,0.43,0.65,0.00,0.01,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,12,1.00,0.00,0.08,0.00,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,293,1113,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,1078,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,39,0.00,0.00,0.00,0.00,1.00,0.00,0.08,77,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 5,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,14,1.00,0.00,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,634,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,242,6757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,99,0.00,0.00,0.00,0.00,0.83,0.03,0.00,255,149,0.58,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,352,1315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 7,tcp,ftp,SF,6,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.92,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.85,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,1,1.00,1.00,0.00,0.00,0.06,0.22,0.00,255,61,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,319,6489,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,2,0.25,0.50,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,10,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,10,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,355,833,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,12,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3051,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,47,0.07,0.13,0.07,0.04,0.00,0.02,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,20,0.00,0.00,0.99,1.00,0.16,0.08,0.00,255,40,0.16,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,215,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,9,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1441,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,78,41,0.53,0.08,0.01,0.00,0.03,0.00,0.04,0.00,normal 0,tcp,http,SF,240,493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,29,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,165,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,214,5,0.02,0.07,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,11,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,5,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,1,0.11,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.10,0.00,0.83,1.00,anomaly 0,tcp,http,SF,353,7659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,19,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,234,3918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,6956,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,1,1.00,1.00,0.00,0.00,0.06,0.25,0.00,255,61,0.24,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,13,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,209,440,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.08,0.08,0.00,0.00,1.00,0.00,0.15,49,255,1.00,0.00,0.02,0.02,0.02,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7940,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,88,0.76,0.06,0.76,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,199,1,0.01,0.95,0.96,0.00,0.96,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,25,0.10,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,11,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,333,1301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,25,1.00,1.00,0.00,0.00,0.09,0.04,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3690,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.64,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,79,0.83,0.02,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,15,117,1.00,0.00,0.07,0.03,0.00,0.01,1.00,0.57,normal 0,tcp,http,SF,350,1378,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,370,1,0.06,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,udp,domain_u,SF,45,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,140,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,8,1.00,1.00,0.00,0.00,0.44,0.17,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,4103,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,21,0.08,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 28,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,0.43,0.29,0.18,51,49,0.96,0.04,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,362,7962,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 36,tcp,ftp,SF,1006,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,1,0.07,0.14,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,359,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,25,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,270,4111,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_2,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,10,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,61,183,1.00,0.00,0.02,0.03,0.00,0.01,1.00,0.73,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,21,0.08,0.25,0.08,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,236,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,166,1992,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,11,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,1592,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,129,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,16025,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,17,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,26,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,95,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,10,0.00,0.00,0.00,0.00,0.50,1.00,0.40,255,238,0.93,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,168,10388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,1417,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,720,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4892,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,32,0.37,0.07,0.37,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,29623,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S1,286,21900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,44,0.50,0.02,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,185,8188,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,168,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,5,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8,tcp,ftp,SF,58,222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,1,0.01,0.05,0.01,0.00,0.01,0.00,0.02,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,7263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,255,1.00,0.00,0.01,0.01,0.00,0.00,0.02,0.01,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,258,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,678,478,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,4,0.00,0.00,0.00,0.00,0.17,0.33,1.00,255,8,0.03,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,6452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,32,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,2333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,27,255,1.00,0.00,0.04,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,284,64787,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,4,0.00,0.00,0.00,0.00,0.07,0.09,0.00,255,4,0.02,0.22,0.83,0.00,0.00,0.00,0.17,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,53,0.21,0.16,0.21,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,95,61,0.64,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,11,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,21,0.15,0.04,0.15,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.21,0.21,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,231,1.00,0.00,0.12,0.09,0.00,0.00,1.00,0.67,normal 3,tcp,smtp,SF,1991,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,90,193,0.88,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,1308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,13,255,1.00,0.00,0.08,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,654,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,126,0.76,0.12,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,6015,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,10,255,1.00,0.00,0.10,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,184,1619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,401,401,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,233,1,0.00,0.58,0.58,0.00,0.00,0.00,0.58,1.00,anomaly 0,tcp,smtp,SF,614,338,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,155,0.61,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,20,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,268,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,2,0.00,0.00,0.00,0.00,0.10,0.20,0.00,255,2,0.01,0.21,0.64,0.00,0.00,0.00,0.31,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,15,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,15,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,2,0.99,1.00,0.00,0.00,0.02,0.08,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,13,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,ftp,SF,1248,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,114,0.45,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,283,29165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,193,7355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,32,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,8,1.00,1.00,0.00,0.00,0.57,0.29,0.00,255,69,0.27,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,15,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,http,SF,229,1070,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,10,1.00,1.00,0.00,0.00,0.30,0.09,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.18,0.00,0.82,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.23,0.00,0.77,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1689,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,16,0.41,0.08,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,2139,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,75,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,3,1.00,1.00,0.00,0.00,0.08,0.14,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,287,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,16,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,9,1.00,1.00,0.00,0.00,0.47,0.21,0.00,255,65,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,262,529,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,82,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,37,0.15,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,254,3544,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,123,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 4535,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.68,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,187,15157,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,13,0.00,0.08,0.00,0.00,1.00,0.00,0.23,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,45,1.00,0.00,1.00,0.07,0.00,0.02,0.00,0.00,anomaly 6,tcp,smtp,SF,789,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,75,0.77,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,144,9569,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,55,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,1607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,137,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1427,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,49,0.19,0.09,0.00,0.00,0.66,0.00,0.01,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,13,95,1.00,0.00,0.08,0.23,0.00,0.00,1.00,1.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,12,1.00,1.00,0.00,0.00,0.15,0.08,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,250,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.67,0.92,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,4978,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,115,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,18275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,32,1.00,0.00,0.03,0.00,0.00,0.00,0.06,0.06,anomaly 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,25,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12833,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.67,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,304,420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,240,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,8,1.00,1.00,0.00,0.00,0.22,0.11,0.00,198,48,0.24,0.02,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,1,0.11,0.00,0.89,1.00,0.02,1.00,0.00,255,1,0.00,0.53,0.00,0.00,0.03,0.00,0.24,1.00,anomaly 0,tcp,http,SF,215,1796,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.33,0.50,0.00,0.00,1.00,0.00,0.50,15,255,1.00,0.00,0.07,0.02,0.07,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,11,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,20,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,20,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,20,0.08,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,325,2109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,17,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,5593,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,109,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,6,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,2241,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,33,255,1.00,0.00,0.03,0.06,0.00,0.00,0.52,0.45,normal 0,tcp,http,SF,302,3233,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,146,19994,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1066,481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,30,0.12,0.02,0.00,0.00,0.00,0.00,0.74,0.00,normal 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,290,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,4,0.00,0.00,0.00,0.00,0.21,0.21,0.00,255,47,0.18,0.24,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.25,0.25,1.00,0.00,0.00,134,134,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,206,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,64,0.85,0.11,0.85,0.05,0.00,0.02,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,21,1.00,0.00,1.00,0.24,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,230,1374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,53,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,405,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,250,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,14052,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,63,0.21,0.06,0.21,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,140,0.00,0.00,0.00,0.00,0.99,0.01,0.02,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,22,0.09,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,114,27,0.24,0.04,0.24,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,3,1.00,1.00,0.00,0.00,0.43,0.43,0.00,169,45,0.25,0.02,0.01,0.04,0.99,0.96,0.00,0.00,anomaly 0,tcp,http,SF,291,2669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,172,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,83,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,188,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,74,0.65,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 15,tcp,smtp,SF,864,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,119,0.54,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,144,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,10,1.00,1.00,0.00,0.00,0.25,0.12,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,390,12604,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,148,22265,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,90,0.35,0.20,0.35,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,237,18604,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,8346,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,44,0.00,0.00,0.00,0.00,1.00,0.00,0.07,4,53,1.00,0.00,0.25,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,38,1,0.03,1.00,0.03,0.00,0.00,0.00,0.95,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,358,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,1,255,1.00,0.00,1.00,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,1,0.04,0.00,0.88,1.00,0.01,0.99,0.00,255,1,0.00,0.59,0.00,0.00,0.02,0.00,0.52,1.00,anomaly 14,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,30,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.15,0.00,0.00,1.00,0.98,normal 0,tcp,http,SF,337,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7321,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,78,0.33,0.02,0.33,0.03,0.00,0.00,0.02,0.00,normal 22,tcp,ftp,SF,231,766,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,37,0.27,0.04,0.01,0.00,0.00,0.00,0.01,0.03,normal 40171,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.47,0.92,0.00,0.00,0.00,0.92,1.00,anomaly 0,tcp,http,SF,363,7956,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,3009,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,52,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,13,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,231,0.91,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1533,360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,170,153,0.63,0.11,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,ftp,SF,1224,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,222,50,0.23,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,20,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,5381,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,358,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,206,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,136,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,32,232,1.00,0.00,0.03,0.17,0.03,0.00,0.97,0.91,normal 4,tcp,finger,SF,7,363,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,19,0.08,0.02,0.01,0.11,0.00,0.00,0.00,0.05,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,12,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,18,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,1,0.00,0.00,0.00,0.00,0.11,0.22,0.00,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,139,0.00,0.00,0.00,0.00,1.00,0.00,0.01,249,190,0.76,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,223,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,254,6760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,168,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 4382,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.68,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,141,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,13,0.06,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 17025,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.71,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,17,1.00,1.00,0.00,0.00,0.46,0.05,0.00,79,21,0.22,0.05,0.04,0.10,0.97,0.81,0.00,0.00,anomaly 0,tcp,http,SF,330,5941,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,22,0.00,0.00,0.00,0.00,1.00,0.00,0.23,7,255,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,553,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,2,5,1.00,0.00,0.50,0.40,0.00,0.40,0.00,0.20,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,242,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,47,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,215,0.73,0.04,0.73,0.01,0.00,0.00,0.12,0.00,normal 0,tcp,http,SF,290,2860,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,14,1.00,1.00,0.00,0.00,0.50,0.14,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,24,1.00,0.00,0.04,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,http,SF,202,960,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,439,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,103,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,3731,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,220,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,837,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 12892,tcp,telnet,SF,81,1226,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,14,0.30,0.09,0.02,0.00,0.02,0.07,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,18,0.98,1.00,0.02,0.00,0.33,0.07,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,319,7333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,381,381,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,43,247,1.00,0.00,0.02,0.06,0.00,0.00,1.00,0.59,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,8,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,18,1.00,1.00,0.00,0.00,0.26,0.06,0.00,255,43,0.17,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,16,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,X11,SF,20492,15564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,7,1.00,0.00,0.14,0.00,0.14,0.14,0.14,0.14,normal 0,udp,domain_u,SF,46,84,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,299,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,215,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2805,335,0,0,0,0,0,1,0,0,0,0,0,0,2,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,122,0.48,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,4512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,110,0.64,0.07,0.64,0.02,0.02,0.00,0.00,0.00,normal 1,tcp,ftp,SF,1222,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,93,0.36,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,100,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,smtp,SF,1189,412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,166,0.88,0.12,0.04,0.01,0.00,0.00,0.04,0.02,normal 0,tcp,http,SF,282,3200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 584,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.61,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,23,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,23,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,208,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,8891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,707,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,13,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 15,tcp,smtp,SF,898,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,114,73,0.64,0.05,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,96,255,1.00,0.00,0.02,0.10,0.00,0.00,0.46,0.71,normal 0,tcp,http,SF,213,998,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.15,0.00,0.85,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.12,0.00,0.88,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,357,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,207,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,216,171,0.79,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,220,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,124,0.35,0.06,0.35,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,440,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,9,1.00,1.00,0.00,0.00,0.50,0.22,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10774,tcp,telnet,SF,75,919,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,19,0.28,0.05,0.02,0.11,0.25,0.84,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,20,0.00,0.00,1.00,1.00,0.19,0.07,0.00,232,20,0.09,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,336,1656,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,118,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,2,0.67,0.67,0.33,0.00,0.00,0.00,0.67,1.00,normal 0,tcp,http,SF,224,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,8,255,1.00,0.00,0.12,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,1,1.00,1.00,0.00,0.00,0.08,0.38,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,1.00,1.00,0.00,0.00,0.25,0.50,0.00,255,61,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,3909,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,16806,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,0.12,1,47,1.00,0.00,1.00,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,9,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,9,0.04,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,82,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,181,5830,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,23,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,18,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,78,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,3751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,197,134,0.68,0.01,0.68,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.21,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,214,1650,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,52,0.00,0.00,0.00,0.00,1.00,0.00,0.08,90,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,17,1.00,1.00,0.00,0.00,0.29,0.10,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,84,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,11,0.50,0.18,0.00,0.00,1.00,0.00,0.27,11,255,1.00,0.00,0.18,0.01,0.09,0.01,0.00,0.00,normal 0,tcp,http,SF,145,532,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.19,0.00,0.00,0.33,0.85,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,180,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,173,11889,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,213,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1616,501,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,32,0.13,0.06,0.00,0.00,0.65,0.00,0.01,0.00,normal 0,udp,domain_u,SF,102,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,27,25,0.93,0.11,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,1293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,38,0.00,0.00,0.00,0.00,1.00,0.00,0.08,135,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,21,1.00,1.00,0.00,0.00,0.50,0.07,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.09,0.00,0.00,1.00,0.99,normal 0,tcp,http,SF,268,10333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,10,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,1637,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,8,127,1.00,0.00,0.12,0.16,1.00,0.06,0.00,0.94,normal 2,tcp,smtp,SF,1400,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,121,93,0.77,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,16,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,14,1,0.07,1.00,0.07,0.00,0.00,0.00,0.86,1.00,anomaly 0,udp,domain_u,SF,45,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,399,399,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,1193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,124,231,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,212,5383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,2,0.50,0.50,0.25,0.00,0.00,0.00,0.50,1.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,197,1463,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,105,0.00,0.00,0.00,0.00,0.74,0.04,0.00,255,146,0.57,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,480,480,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,118,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,25,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 3735,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.83,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,930,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.03,0.40,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,399,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,http,SF,240,381,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,14,255,1.00,0.00,0.07,0.04,0.00,0.04,0.00,0.00,normal 28,tcp,ftp,SF,1560,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,22,0.34,0.08,0.02,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,340,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,235,4097,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,229,4900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,19,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,24,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,23,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,303,303,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,217,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,11763,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,4,1.00,1.00,0.00,0.00,0.14,0.14,0.00,255,60,0.24,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.49,0.47,0.00,0.00,0.00,0.47,1.00,anomaly 4,tcp,smtp,SF,854,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,49,0.73,0.09,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,S2,352,13336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,133,255,1.00,0.00,0.01,0.04,0.01,0.00,0.13,0.08,normal 9305,tcp,telnet,SF,421,38780,0,0,0,0,0,1,3,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,8,0.13,0.06,0.02,0.25,0.00,0.12,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.12,0.00,0.00,1.00,0.80,normal 0,tcp,http,SF,302,4743,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,54,0.00,0.00,0.00,0.00,1.00,0.00,0.11,12,255,1.00,0.00,0.08,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,11,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,1,0.00,0.99,0.02,0.00,0.20,0.00,0.78,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,282,7104,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,29,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,16,1.00,1.00,0.00,0.00,0.33,0.08,0.00,255,62,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,101,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,142,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,1496,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,318,1342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,230,192,0.83,0.01,0.00,0.00,0.00,0.00,0.83,1.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,12,1.00,1.00,0.00,0.00,0.11,0.06,0.00,16,12,0.75,0.19,0.06,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,330,1321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,192,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,205,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,4,1.00,1.00,0.00,0.00,0.16,0.16,0.00,255,53,0.21,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,11,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,54,0.57,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,212,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,43,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,43,0.17,0.01,0.17,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,335,1579,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,19,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,32,0.13,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,15,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,30,0.12,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,292,1254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,12,1.00,1.00,0.00,0.00,0.17,0.09,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,6329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,6,0.40,0.33,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,222,34,0.14,0.03,0.14,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,805,328,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,159,0.70,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 4021,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.70,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,22075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,453,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 16,tcp,smtp,SF,1429,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,89,0.80,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,43,38,0.26,0.09,0.26,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,18,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 3026,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,40,1,0.03,0.75,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,1,0.63,1.00,0.37,0.00,0.00,0.42,0.00,255,1,0.00,0.38,0.90,0.00,0.57,1.00,0.33,0.00,anomaly 0,tcp,http,SF,229,770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,18,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,42,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,206,0.00,0.00,0.00,0.00,1.00,0.01,0.00,96,63,0.66,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,15,1.00,1.00,0.00,0.00,0.29,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,10,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,124,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.81,0.81,1.00,0.00,0.00,40,120,1.00,0.00,0.03,0.17,0.00,0.00,0.90,0.97,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,16,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,pop_3,SF,150,13042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,24,24,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,2235,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,3,255,1.00,0.00,0.33,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,28,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,12,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,199,3039,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,7732,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 4309,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 3409,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.62,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,72,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.33,0.00,0.00,1.00,0.99,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,17,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,572,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,3248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 9,tcp,ftp_data,SF,0,5150772,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,9,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,10,0.64,1.00,0.00,0.00,0.05,0.04,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2181,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,10,0.91,0.18,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,4945,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,19,255,1.00,0.00,0.05,0.01,0.00,0.00,0.05,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,1382,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,15,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,13549,1858,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,85,176,0.76,0.04,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,14,1.00,1.00,0.00,0.00,0.35,0.10,0.00,122,34,0.28,0.03,0.02,0.00,0.98,1.00,0.00,0.00,anomaly 4641,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,331,1271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,91,248,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,4,1.00,1.00,0.00,0.00,0.50,0.38,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,1167,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,2824,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,5,1.00,1.00,0.00,0.00,0.50,0.30,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,774,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,83,80,0.76,0.06,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1035,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,66,0.26,0.06,0.00,0.00,0.51,0.00,0.05,0.03,normal 0,tcp,http,SF,332,6356,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,1683,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,262,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,41,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,267,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,2194,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.02,0.04,0.00,0.25,0.29,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,48,1,0.02,1.00,0.02,0.00,0.00,0.00,0.92,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,438,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1879,323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,17,244,0.76,0.12,0.06,0.02,0.00,0.00,0.00,0.00,normal 15,tcp,http,SF,201,8528,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.06,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,26,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,852,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,249,86,0.35,0.01,0.35,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,68,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,134,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,4,1.00,1.00,0.00,0.00,0.25,0.25,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,222,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,852,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,1,0.20,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.02,0.22,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,3,255,1.00,0.00,0.33,0.17,0.00,0.00,1.00,0.98,normal 0,tcp,http,SF,232,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,8,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,24,1.00,1.00,0.00,0.00,0.12,0.06,0.00,58,18,0.31,0.16,0.02,0.00,0.76,1.00,0.02,0.00,anomaly 0,tcp,http,SF,317,2226,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,38,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,5,0.03,0.10,0.02,0.40,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,378,378,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,25,0.21,0.06,0.21,0.00,0.02,0.00,0.53,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,333,609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,22260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,44,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,13,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 3,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,316,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,254,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,640,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,87,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,28,1.00,0.00,1.00,0.54,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,72,68,0.94,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,20,255,1.00,0.00,0.05,0.17,0.00,0.00,1.00,1.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,144,0.56,0.04,0.56,0.00,0.00,0.00,0.00,0.00,anomaly 2,tcp,smtp,SF,648,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,139,99,0.71,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,254,1419,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,94,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,352,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,66,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.35,0.65,0.00,0.09,0.00,0.26,0.00,anomaly 0,tcp,http,SF,329,12047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,282,38435,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,14,255,1.00,0.00,0.07,0.04,0.00,0.02,0.00,0.00,normal 11,tcp,smtp,SF,2119,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,6,0.75,0.25,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,8,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,214,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1573,404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,6,4,0.67,0.50,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,74,0.88,0.25,0.88,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,259,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,266,7570,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,13,0.00,0.00,0.25,0.08,1.00,0.00,0.15,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.25,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,11,0.00,0.00,1.00,1.00,0.06,0.08,0.00,255,11,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,300,26466,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,255,1.00,0.00,0.01,0.02,0.02,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,18,0.00,0.00,1.00,1.00,0.17,0.08,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,126,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,250,0.00,0.00,0.00,0.00,1.00,0.01,0.00,140,107,0.76,0.01,0.24,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,14,1.00,1.00,0.00,0.00,0.30,0.13,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,144,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,12,0.09,0.04,0.09,0.17,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,632,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,455,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,10,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,709,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,136,137,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,9,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,170,70,0.20,0.12,0.28,0.03,0.01,0.03,0.00,0.00,normal 0,tcp,http,SF,210,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1762,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,122,0.73,0.07,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,1.00,1.00,1.00,0.00,0.75,31,255,1.00,0.00,0.03,0.11,0.00,0.00,1.00,0.91,normal 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,25,0.10,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,40,40,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,104,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,210,0.82,0.02,0.82,0.00,0.00,0.00,0.02,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,363,345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,197,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,13,0.00,0.00,0.00,0.00,1.00,0.00,0.31,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,202,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,3,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.57,0.56,0.00,0.00,0.00,0.57,1.00,anomaly 0,tcp,http,SF,228,6068,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,5,0.10,0.08,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,202,198,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,806,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,19,0.00,0.00,0.00,0.00,0.90,0.14,0.00,255,19,0.07,0.74,0.30,0.00,0.09,0.00,0.61,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,2271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,8,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,204,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,602,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,113,1.00,0.00,0.25,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,300,937,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,6,1.00,0.00,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,1900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,36,0.00,0.00,0.00,0.00,1.00,0.00,0.11,27,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,5,1.00,1.00,0.00,0.00,0.42,0.42,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,116,1,0.01,0.91,0.93,0.00,0.93,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,31,35,1.00,0.00,0.03,0.06,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,184,24043,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,274,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,206,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,16,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,2592,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,20,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4892,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,48,0.31,0.04,0.31,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,132,10,0.08,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.02,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,187,0.73,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,14,0.05,0.25,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,209,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,199,1,0.01,0.18,0.16,0.00,0.00,0.00,0.17,1.00,anomaly 0,tcp,http,SF,266,2424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.67,1.00,0.00,1.00,255,235,0.92,0.02,0.00,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,264,2825,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,100,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,840,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,163,0.48,0.19,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,184,1650,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,7712,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,8,255,1.00,0.00,0.12,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,20,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,23,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6,tcp,ssh,RSTO,0,15,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,1,0.33,1.00,0.33,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,212,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 25990,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.70,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,61,13,0.21,0.10,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,276,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.10,0.00,0.00,1.00,0.95,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,136,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,136,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,14,0.93,1.00,0.07,0.00,0.93,0.13,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,373,1575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,207,10679,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.02,0.00,0.01,0.00,0.00,normal 7,tcp,http,SF,284,148,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,1712,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,195,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,10,0.00,0.00,1.00,1.00,0.10,0.08,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,57,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,102,0.36,0.04,0.36,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,98,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,9,1.00,1.00,0.00,0.00,0.20,0.11,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1839,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,114,2,0.02,0.63,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.67,213,12,0.04,0.03,0.04,0.17,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,10,1.00,0.00,1.00,0.60,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,220,18912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,209,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,13,0.67,0.33,0.67,0.15,0.00,0.08,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.25,0.25,1.00,0.00,0.00,69,69,1.00,0.00,0.01,0.00,0.00,0.00,0.19,0.19,anomaly 0,tcp,http,SF,337,1084,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.00,0.00,0.00,1.00,0.00,0.00,0.00,238,200,0.84,0.01,0.00,0.00,0.00,0.00,0.84,1.00,normal 0,tcp,http,SF,225,703,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,255,1.00,0.00,0.00,0.02,0.00,0.00,0.33,0.34,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,121,0.47,0.01,0.47,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,509,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,73,0.33,0.01,0.33,0.00,0.00,0.00,0.00,0.00,anomaly 2046,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.59,0.96,0.00,0.00,0.00,0.00,0.00,normal 179,tcp,telnet,SF,1559,2855,0,0,0,3,0,1,4,1,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,284,941,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,106,106,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,189,0.00,0.00,0.00,0.00,1.00,0.00,0.00,224,130,0.58,0.03,0.58,0.00,0.01,0.00,0.28,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,219,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,38,0.00,0.00,0.00,0.00,1.00,0.00,0.11,117,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,9,593,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,6,0.02,0.02,0.01,0.33,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,20,1.00,1.00,0.00,0.00,0.21,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,1493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 20,tcp,ftp,SF,236,769,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,6,0.29,0.10,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,20,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2584,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.65,0.99,0.00,0.00,0.00,0.00,0.00,normal 8437,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,51,2,0.02,1.00,0.02,1.00,0.00,0.00,0.98,0.50,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,11,1.00,1.00,0.00,0.00,0.20,0.07,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,4158,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,255,1.00,0.00,0.01,0.02,0.00,0.01,0.02,0.04,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,78,1.00,0.00,0.33,0.14,0.00,0.00,1.00,1.00,normal 8217,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.64,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,12,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,12,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,258,7333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,1337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,17,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,1,0.03,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1093,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,162,180,0.72,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,40,0.16,0.02,0.16,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 50,tcp,telnet,SF,780,1593580,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,28,0.16,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,26,214,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,19,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,45,0.18,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 4701,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1645,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,73,0.63,0.03,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,4200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,18,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,11,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,44,0.51,0.03,0.51,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,56,20,0.36,0.12,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,140,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,373,2289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,19,0.00,0.00,1.00,1.00,0.08,0.05,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,231,4593,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,67,0.00,0.03,0.00,0.00,1.00,0.00,0.07,15,255,1.00,0.00,0.07,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,360,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,250,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,2617,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,944,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,139,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,2810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,664,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,86,0.84,0.02,0.84,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,221,37127,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,16,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,1,0.08,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.87,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,18,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,4,251,1.00,0.00,0.25,0.16,0.00,0.00,1.00,1.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,171,0.67,0.01,0.67,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,339,14468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1342,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,193,52,0.27,0.02,0.27,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,25,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,3327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,19,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,283,2238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,221,3185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,149,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,197,0.77,0.02,0.77,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,159,9533,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,268,1335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,240,136,0.57,0.03,0.01,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S2,1153,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,104,27,0.26,0.07,0.29,0.00,0.02,0.07,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 40,tcp,telnet,SF,124,11095,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,4,0.01,0.04,0.01,0.50,0.00,0.25,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.15,0.00,0.00,1.00,0.94,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,25,0.00,0.00,0.00,0.00,0.48,0.08,0.00,255,91,0.36,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,262,873,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,597,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.01,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,185,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,560,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,106,165,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,204,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,656,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,146,0.83,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,1247,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,35,35,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,29,0.00,0.00,0.00,0.00,0.67,0.33,0.07,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,4412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,1401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,87,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 1,tcp,smtp,SF,1452,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,141,129,0.46,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,3767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,250,130,0.52,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,43,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,216,25078,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,9,254,1.00,0.00,0.11,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,11,1.00,1.00,0.00,0.00,0.26,0.10,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,56,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,156,0.61,0.39,0.61,0.00,0.09,0.00,0.30,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,149,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2108,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,124,0.57,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,84,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,156,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,656,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,170,0.79,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,6153,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,1,0.00,0.00,0.00,0.00,0.08,0.83,0.00,255,1,0.00,0.15,0.39,0.00,0.00,0.00,0.54,0.00,anomaly 2,tcp,smtp,SF,1241,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,2,0.00,0.00,0.00,0.00,0.20,0.60,1.00,255,13,0.05,0.60,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,749,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,116,0.45,0.04,0.45,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,10,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,117,116,0.58,0.06,0.02,0.02,0.01,0.01,0.00,0.00,normal 1,tcp,daytime,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,2,0.64,0.50,0.36,0.50,0.01,0.42,0.00,255,2,0.01,0.36,0.85,0.00,0.55,0.50,0.31,0.50,anomaly 0,tcp,http,SF,242,3569,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,16,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,10,1.00,1.00,0.00,0.00,0.07,0.04,0.00,255,10,0.04,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,4907,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,936,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,122,0.38,0.03,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,RSTR,54060,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.33,0.33,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 6071,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.67,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,8,16,1.00,0.00,0.12,0.19,0.00,0.00,1.00,1.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 575,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,14,1,0.07,0.71,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,1080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,12,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,275,1637,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,164,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,456,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,153,255,1.00,0.00,0.01,0.05,0.00,0.00,0.01,0.01,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,9,0.00,0.00,1.00,1.00,0.08,0.08,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,331,2554,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,1680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 6552,tcp,IRC,RSTR,858,5503,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,6,0.00,0.00,0.38,0.83,0.46,0.15,0.00,148,26,0.18,0.02,0.01,0.00,0.00,0.00,0.13,0.73,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,241,1,0.00,0.95,0.97,0.00,0.97,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,20,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,11,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,855,2586,0,0,0,17,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,8,1.00,0.00,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,2674,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,1841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,197,1.00,0.00,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 667,tcp,X11,SF,486700,231624,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,4,1.00,0.00,0.25,0.00,0.00,0.00,0.25,0.25,normal 0,tcp,smtp,SF,837,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,199,176,0.65,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,20,1.00,1.00,0.00,0.00,0.18,0.05,0.00,189,20,0.11,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,194,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,110,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,16,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,438,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,12,255,1.00,0.00,0.08,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,telnet,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,154,2,0.01,0.12,0.01,0.00,0.01,0.50,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,73,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,18,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,149,347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.29,2,255,1.00,0.00,0.50,0.01,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,115,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,196,9287,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.20,0.20,1.00,0.00,0.00,220,255,1.00,0.00,0.00,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,309,8292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,5,1.00,0.80,0.00,0.00,0.02,0.07,0.40,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,285,3393,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,13,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1130,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,183,0.72,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,291,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,74,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,256,2052,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,35,0.00,0.57,0.00,0.00,1.00,0.00,0.09,55,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,17,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,1,0.25,0.50,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,11,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,2154,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,25,0.19,0.05,0.19,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1125,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,102,0.40,0.04,0.00,0.00,0.18,0.00,0.02,0.00,normal 0,udp,private,SF,28,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,317,2075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 6,tcp,telnet,SF,116,1193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.07,0.00,0.00,0.94,0.00,0.00,0.00,normal 0,tcp,http,SF,223,3616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.20,0.12,0.00,0.00,1.00,0.00,0.25,97,231,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,19,1.00,1.00,0.00,0.00,0.26,0.08,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,20,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,15,0.03,0.08,0.03,0.13,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,269,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.36,0.00,0.64,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.29,0.00,0.71,1.00,anomaly 0,tcp,http,SF,220,728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,97,0.00,0.00,0.00,0.00,0.72,0.04,0.00,255,146,0.57,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,1,0.01,0.00,0.93,1.00,0.01,1.00,0.00,230,1,0.00,0.49,0.00,0.00,0.00,0.00,0.44,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,149,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,34,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,249,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,20,1.00,1.00,0.00,0.00,0.24,0.07,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,9002,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,51,1,0.02,0.12,0.06,0.00,0.12,0.00,0.06,1.00,anomaly 0,tcp,http,SF,255,2450,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,16,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,9,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,3468,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,1,0.06,0.00,0.00,0.00,0.06,0.22,0.00,65,1,0.02,0.09,0.66,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,9,1.00,1.00,0.00,0.00,0.50,0.11,0.00,255,59,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,7,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,7,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,16,0.06,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,87,58,0.67,0.07,0.01,0.00,0.02,0.00,0.66,0.97,normal 0,tcp,http,SF,236,896,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,394,1,0.07,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,5,1.00,1.00,0.00,0.00,0.07,0.08,0.00,182,5,0.03,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,368,5939,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,18,0.00,0.00,0.07,0.06,1.00,0.00,0.17,136,148,1.00,0.00,0.01,0.03,0.01,0.01,0.01,0.01,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,17,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,193,678,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,10,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,250,267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,17,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,175,228,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,1,1.00,1.00,0.00,0.00,0.00,0.04,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,X11,SF,312876,22784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,32,0.59,0.07,0.02,0.00,0.02,0.03,0.02,0.03,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,43,0.89,0.07,0.89,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,17,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,2108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,277,1313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,63,2,0.02,1.00,0.02,1.00,0.00,0.00,0.92,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 21243,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.66,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S1,164,29200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,19,1.00,0.05,0.00,0.00,1.00,0.00,0.16,62,255,1.00,0.00,0.02,0.02,0.02,0.00,0.00,0.00,normal 1235,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.25,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.55,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,23,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,9,19,1.00,0.00,0.11,0.26,0.00,0.00,1.00,1.00,normal 28,tcp,ftp,SF,334,1069,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,31,0.22,0.04,0.01,0.00,0.00,0.00,0.01,0.03,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,236,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,41,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,19,1.00,1.00,0.00,0.00,0.35,0.11,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,1830,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,311,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,160,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,3318,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,25,0.10,0.06,0.00,0.00,0.00,0.00,0.87,0.00,normal 0,tcp,http,SF,223,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.15,0.00,0.85,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,SF,1248,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,87,0.34,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,2,0.68,0.50,0.32,0.50,0.01,0.39,0.00,255,2,0.01,0.25,0.65,0.00,0.44,0.50,0.20,0.50,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,48,1.00,0.00,1.00,0.08,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,90,146,0.81,0.03,0.01,0.01,0.09,0.03,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,152,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,133,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,490,1,0.07,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,110,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,33,0.75,0.00,0.00,0.00,0.25,0.05,0.00,255,33,0.13,0.87,0.13,0.00,0.09,0.00,0.78,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,8843,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 10,tcp,smtp,SF,11587,1431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,180,0.70,0.12,0.01,0.01,0.01,0.00,0.03,0.04,normal 0,tcp,smtp,SF,1451,373,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,125,244,0.95,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,44,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,18,1.00,1.00,0.00,0.00,0.47,0.05,0.00,40,64,0.45,0.08,0.03,0.03,0.95,0.28,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.27,0.00,0.00,1.00,0.95,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,9,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,124,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,276,4465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,9,0.50,0.11,0.00,0.00,1.00,0.00,0.22,5,255,1.00,0.00,0.40,0.09,0.20,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,309,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,0.98,0.00,0.00,0.04,0.00,0.95,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,398,398,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,14,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,14,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,346,2370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,223,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,200,8,0.04,0.02,0.00,0.25,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,351,351,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,375,306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,183,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.79,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,16,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,1791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,777,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,48,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,48,0.40,0.03,0.40,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,2,1.00,1.00,0.00,0.00,0.02,0.08,0.00,6,2,0.33,0.50,0.17,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,13056,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,45,45,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,253,1.00,0.00,0.01,0.06,0.00,0.00,0.38,0.52,normal 0,tcp,http,SF,219,2367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,204,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 2165,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.60,0.85,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,4500,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,180,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,5,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,2297,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,88,0.31,0.03,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,230,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,148,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,1,0.01,0.00,0.94,1.00,0.01,1.00,0.00,238,1,0.00,0.50,0.00,0.00,0.00,0.00,0.46,1.00,anomaly 0,tcp,http,SF,298,1609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,17,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,12,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,31,0.12,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,33,1.00,0.00,1.00,0.18,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,217,187,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,17,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,9,1.00,0.00,1.00,0.44,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,7,1.00,1.00,0.00,0.00,0.30,0.13,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,183,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,18,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.73,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,230,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,230,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1006,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,126,152,0.64,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,18,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,2480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.02,0.00,0.00,0.62,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,260,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1887,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,11,0.04,0.06,0.00,0.00,0.00,0.00,0.95,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,80,1.00,0.00,1.00,0.20,0.00,0.00,1.00,1.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,191,1,0.01,0.49,0.49,0.00,0.00,0.00,0.48,1.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,54,0.08,0.16,0.17,0.04,0.03,0.02,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,10,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.48,0.42,0.00,0.11,0.00,0.43,1.00,anomaly 0,tcp,http,SF,237,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,56,255,1.00,0.00,0.02,0.07,0.00,0.00,0.98,1.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,338,338,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,15,0.00,0.00,1.00,1.00,0.14,0.07,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.05,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,46,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,152,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,SF,14,37,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,2,0.03,0.12,0.03,1.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.72,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,56,8,0.14,0.11,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,20,1.00,1.00,0.00,0.00,0.26,0.06,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,12268,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,149,1.00,0.00,0.10,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,181,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,15,1.00,0.00,1.00,0.13,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,17071,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,20,252,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,21,0.23,0.04,0.23,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,261,685,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,4017,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,3380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,215,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 39804,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,248,789,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.03,0.00,0.01,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,112,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,112,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,120,32,0.27,0.04,0.27,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,88,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,212,2531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.09,0.09,0.00,0.00,1.00,0.00,0.00,232,232,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,domain,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,1,0.00,0.00,0.00,0.00,0.01,0.02,0.00,255,1,0.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1026,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,232,192,0.75,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.75,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3843,333,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,139,0.54,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,9965,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,240,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,18,0.00,0.00,1.00,1.00,0.17,0.08,0.00,230,18,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,122,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,122,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.05,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.02,0.00,0.98,1.00,anomaly 0,tcp,http,SF,303,857,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.62,4,255,1.00,0.00,0.25,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,905,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,201,0.79,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,752,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,96,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,59,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,405,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,http,SF,235,439,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,789,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,115,0.44,0.01,0.44,0.02,0.00,0.00,0.00,0.00,normal 2401,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.48,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,rje,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.87,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,446,446,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,178,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,186,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,218,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,184,23681,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,15,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1858,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,30,168,0.97,0.07,0.03,0.01,0.00,0.00,0.03,0.04,normal 21,tcp,ftp,SF,244,773,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,172,53,0.31,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,11,1.00,1.00,0.00,0.00,0.35,0.06,0.00,33,57,0.33,0.09,0.06,0.04,0.94,0.19,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,24,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.66,0.64,0.00,0.00,0.00,0.64,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,1349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,13,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,10,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 6349,tcp,IRC,RSTR,922,6393,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,56,18,0.32,0.04,0.02,0.00,0.02,0.06,0.25,0.78,normal 0,tcp,ftp_data,SF,1030,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,93,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,477,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,1044,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,231,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,46,1.00,0.00,0.25,0.28,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,884,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,76,0.13,0.09,0.13,0.03,0.00,0.00,0.02,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.84,0.84,1.00,0.00,0.00,178,189,1.00,0.00,0.01,0.03,0.01,0.01,0.33,0.37,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,109,0.43,0.01,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,136,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,1750,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,184,17,0.09,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,54,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,190,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,1342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.57,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,13,1.00,1.00,0.00,0.00,0.50,0.08,0.00,255,59,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,3053,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,13,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.08,0.00,0.00,1.00,0.66,normal 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,158,0.00,0.00,0.00,0.00,0.99,0.01,0.02,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,2501,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,29,0.00,0.00,0.00,0.00,1.00,0.00,0.10,46,131,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,275,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,350,4137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,51,0.04,0.02,0.00,0.00,1.00,0.00,0.04,154,255,1.00,0.00,0.01,0.05,0.01,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,113,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,346,382,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,7,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,351,1,0.03,0.00,0.96,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,tcp,http,SF,286,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,159,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,151,8719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,3200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,193,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,218,0.85,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,25,0.00,0.00,0.00,0.00,1.00,0.00,0.16,32,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,232,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 6,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.77,0.77,0.00,0.00,0.00,0.77,1.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,18,1.00,1.00,0.00,0.00,0.16,0.08,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,356,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,15,1.00,0.00,1.00,0.20,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6,udp,domain_u,SF,111,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,56,0.95,0.03,0.22,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,52,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp,SF,1225,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,116,0.45,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,373,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.05,0.05,0.00,0.00,1.00,0.00,0.00,255,107,0.42,0.02,0.42,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,209,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,608,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,18318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,6,255,1.00,0.00,0.17,0.05,0.00,0.02,0.00,0.00,normal 2620,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,11,0.98,1.00,0.02,0.00,0.27,0.12,0.00,255,43,0.17,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,583,323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,9,0.04,0.71,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,2841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,7,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,7,0.03,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,20,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.97,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,5,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,938,2720,0,0,0,19,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,63,0.31,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,1382,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,123,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.37,0.37,0.00,0.00,0.00,0.37,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,18,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,3,255,1.00,0.00,0.33,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,1109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,165,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,2006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,8,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8220,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,2,0.00,0.00,0.00,0.00,0.20,0.20,0.00,255,2,0.01,0.62,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,211,1,0.00,0.23,0.20,0.00,0.00,0.00,0.21,1.00,anomaly 0,tcp,http,SF,367,1831,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,2752,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,7256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,125,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,2265,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,14,0.05,0.02,0.00,0.00,0.87,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,6,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,25,0.10,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,192,4977,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,18,1.00,1.00,0.00,0.00,0.24,0.05,0.00,255,58,0.23,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 17944,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,4,0.02,0.75,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 21747,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,10,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,1249,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,11,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,223,1.00,0.00,1.00,0.13,0.00,0.00,1.00,1.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,19,1.00,0.95,0.00,0.00,0.08,0.06,0.11,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.02,normal 0,tcp,http,SF,331,10783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,56,64,1.00,0.00,0.02,0.05,0.00,0.02,0.00,0.00,normal 0,tcp,http,SF,201,6329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2097,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,209,0.84,0.07,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,56,0.10,0.16,0.19,0.04,0.03,0.02,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,155,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,20,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,207,9092,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.33,0.25,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,265,272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,7,255,1.00,0.00,0.14,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,1123,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.04,0.00,0.01,0.02,0.00,normal 0,udp,domain_u,SF,46,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,156,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1224,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,152,0.62,0.09,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,7208,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,313,21900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,177,255,1.00,0.00,0.01,0.01,0.02,0.01,0.01,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,12,0.24,0.06,0.24,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1131,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,33,0.36,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,19,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,122,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,206,0.81,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,264,13096,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,SF,10,141,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,3,0.02,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 21,tcp,ftp,SF,234,767,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,24,0.39,0.05,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,18,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 21,tcp,ftp,SF,225,767,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,70,0.27,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,6,0.00,0.00,0.00,0.00,0.75,0.38,0.00,255,6,0.02,0.35,0.85,0.00,0.00,0.00,0.15,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,4,1.00,1.00,0.00,0.00,0.14,0.21,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,766,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,28,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,8737,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,13,0.29,0.07,0.29,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,39,0.15,0.04,0.15,0.00,0.27,0.00,0.02,0.00,anomaly 28,tcp,ftp,SF,942,2713,0,0,0,19,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,66,0.27,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,11,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,345,9146,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,13,0.00,0.08,0.17,0.08,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 12666,tcp,IRC,RSTR,1921,10470,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,2,0.25,0.25,0.12,0.00,0.00,0.00,0.25,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,14,1.00,1.00,0.00,0.00,0.27,0.08,0.00,132,39,0.26,0.03,0.01,0.05,1.00,0.87,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1378,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,97,0.52,0.02,0.52,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,11,1.00,1.00,0.00,0.00,0.52,0.10,0.00,255,61,0.24,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,12405,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,171,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.33,0.25,0.00,0.00,1.00,0.00,0.50,45,255,1.00,0.00,0.02,0.02,0.02,0.02,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,104,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,199,0.78,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,231,9,0.04,0.45,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,12,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,261,5238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,8,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,269,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,5971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,13,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.19,0.00,0.81,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.15,0.00,0.85,1.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,105,0.87,0.02,0.87,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 831,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,101,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.00,0.00,0.12,0.38,0.00,255,1,0.00,0.50,0.65,0.00,0.00,0.00,0.35,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,8,0.00,0.00,1.00,1.00,0.14,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,205,584,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,18,1.00,1.00,0.00,0.00,0.14,0.07,0.00,72,18,0.25,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,85,18,0.21,0.13,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,8,0.99,1.00,0.00,0.00,0.07,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,1792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,18,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,31,0.12,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,278,708,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,14,0.00,0.00,1.00,1.00,0.32,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,302,1509,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,3712,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,83,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,145,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,202,0.79,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,139,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2180,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,246,0.97,0.05,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,117,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,16,15,0.94,0.12,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,56215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,271,349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,34537,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.50,0.00,0.00,1.00,0.00,0.75,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,16,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,256,1333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,353,769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,105,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,3089,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,13335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,336,1125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,23,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,24,1.00,1.00,0.00,0.00,0.18,0.04,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12286,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,95,0.93,0.14,0.93,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,9,1.00,1.00,0.00,0.00,0.21,0.09,0.00,125,32,0.25,0.03,0.03,0.06,0.98,0.91,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 13918,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,15,1.00,0.93,0.00,0.07,0.52,0.07,0.13,187,54,0.29,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,2,0.01,0.60,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,161,4297,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,2649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,255,1.00,0.00,0.01,0.01,0.00,0.01,0.00,0.00,normal 11,tcp,sunrpc,SF,6,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.02,0.00,0.97,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.02,0.00,0.96,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,322,236,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,1,0.99,1.00,0.00,0.00,0.01,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,354,9059,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,179,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 6,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,1,0.06,1.00,0.06,0.00,0.00,0.00,0.83,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.33,0.00,255,2,0.01,0.01,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,213,1,0.00,0.07,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,14779,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,135,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,12,1.00,1.00,0.00,0.00,0.25,0.08,0.00,255,58,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,19,0.00,0.00,0.00,0.00,0.29,0.08,0.00,255,42,0.16,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,336,13637,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,386,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,8,0.00,0.00,1.00,1.00,0.06,0.06,0.00,112,8,0.07,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,214,66,0.17,0.03,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,1469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,195,0.83,0.01,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,34,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,3,0.75,0.50,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,3497,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,90,0.97,0.05,0.97,0.31,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,1,0.05,0.00,0.00,0.00,0.05,0.29,0.00,255,1,0.00,0.04,0.22,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1153,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,52,0.30,0.03,0.30,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,36,0.14,0.01,0.16,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,135,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,228,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,122,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,177,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,15377,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,49,0.17,0.45,0.17,0.04,0.00,0.00,0.42,0.02,normal 0,tcp,smtp,SF,1003,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,88,39,0.44,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,8,0.09,0.04,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1352,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,159,0.32,0.06,0.02,0.02,0.13,0.03,0.00,0.00,normal 2713,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.78,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,21,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,216,3,0.01,0.75,0.01,0.00,0.03,0.00,0.61,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,14,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,58,0.23,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,168,5,0.03,0.07,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1644,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,67,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,358,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,3897,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,197,1342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,78,0.31,0.01,0.31,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,267,0.00,0.00,0.00,0.00,0.99,0.01,0.01,192,153,0.80,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,291,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,212,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.28,0.58,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,446,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,68,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,223,27,0.11,0.03,0.11,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,5,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,39,0.21,0.12,0.21,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,116,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,243,21900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,128,255,1.00,0.00,0.01,0.05,0.01,0.00,0.23,0.59,normal 0,tcp,http,SF,210,6746,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,340,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,223,0.87,0.02,0.87,0.00,0.00,0.00,0.07,0.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,167,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,15298,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 8122,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.65,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,20,1.00,1.00,0.00,0.00,0.15,0.04,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,link,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.39,0.74,0.00,0.00,0.00,0.95,1.00,anomaly 0,tcp,remote_job,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,119,1,0.01,0.61,0.60,0.00,0.05,0.00,0.58,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,80,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,14,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,101,0.29,0.02,0.29,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,15,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,34,0.13,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,262,1478,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,18,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 23,tcp,ftp,SF,332,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,48,0.21,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,88382,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,76,0.27,0.04,0.27,0.03,0.00,0.16,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,16,0.00,0.00,1.00,1.00,0.14,0.06,0.00,19,10,0.53,0.11,0.05,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,291,4204,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 3,tcp,smtp,SF,2491,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,107,171,0.45,0.03,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,301,5831,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 26070,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.71,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 21967,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,370,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4753,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,24,0.09,0.58,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 129,tcp,telnet,SF,204,30066,0,0,0,0,0,1,1,1,0,3,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,3,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,238,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,33,0.16,0.06,0.16,0.06,0.00,0.00,0.03,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,272,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,102,0.52,0.04,0.52,0.00,0.01,0.00,0.32,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,8,0.00,0.00,1.00,1.00,0.05,0.08,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,244,2899,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.38,0.35,0.00,0.00,0.00,0.36,1.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,1,0.00,0.00,1.00,1.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,115,34,0.20,0.05,0.20,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,11,0.00,0.00,0.99,1.00,0.08,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,242,97,0.40,0.01,0.40,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,244,6068,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,9,1.00,1.00,0.00,0.00,0.20,0.11,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7233,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,86,0.40,0.02,0.40,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,252,1315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,170,6,0.04,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,1,0.00,0.00,0.00,0.00,0.03,0.13,0.00,255,1,0.00,0.26,0.94,0.00,0.00,0.00,0.06,0.00,anomaly 0,tcp,ftp_data,SF,9178,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,26,0.10,0.33,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 2,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,445,2,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,9,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,8,0.80,0.30,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,140,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,140,0.55,0.01,0.55,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,3416,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,15,1.00,1.00,0.00,0.00,0.20,0.05,0.00,255,35,0.14,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,13,1.00,1.00,0.00,0.00,0.39,0.12,0.00,255,68,0.27,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,1461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,11892,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,23,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,2,0.00,0.00,0.00,0.00,0.14,0.14,0.00,255,18,0.07,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,auth,SF,10,36,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,17,0.12,0.06,0.01,0.18,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,9,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,82,0.25,0.02,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,236,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,3542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,317,1,0.10,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,tcp,http,SF,204,2457,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,53,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,28076,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,19,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,234,484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,36,0.00,0.00,0.00,0.00,1.00,0.00,0.06,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,4,0.00,0.00,0.00,0.00,0.12,0.12,0.00,255,4,0.02,0.57,0.56,0.00,0.00,0.00,0.44,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,4,151,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,78,0.34,0.04,0.34,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,201,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,87,157,0.39,0.03,0.01,0.01,0.02,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,11,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,2912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,47,0.00,0.00,0.00,0.00,1.00,0.00,0.15,53,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.01,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,7,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.02,0.04,0.00,0.00,0.00,0.74,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,179,5592,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,343,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,567,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,31,0.00,0.00,0.14,0.03,1.00,0.00,0.16,161,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,udp,domain_u,SF,43,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,95,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,2,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,30,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,53,1.00,0.00,1.00,0.23,0.00,0.02,1.00,0.96,normal 0,tcp,http,SF,224,3867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,19,1.00,1.00,0.00,0.00,0.15,0.07,0.00,73,19,0.26,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,85,0.00,0.00,0.00,0.00,1.00,0.00,0.02,245,190,0.78,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 16533,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.63,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,257,11445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,682,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,268,9822,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,162,1.00,0.00,0.09,0.03,0.00,0.00,0.00,0.00,normal 16,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,233,0.91,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 20,tcp,ftp,SF,245,774,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,53,0.26,0.07,0.00,0.00,0.01,0.04,0.00,0.00,normal 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,13,0.00,0.00,1.00,1.00,0.20,0.08,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,253,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.16,0.00,0.84,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.84,1.00,anomaly 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,278,0.00,0.00,0.00,0.00,1.00,0.00,0.01,121,200,0.88,0.02,0.88,0.01,0.00,0.00,0.09,0.00,normal 0,tcp,http,SF,409,6033,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,139,247,1.00,0.00,0.01,0.12,0.00,0.00,0.09,0.49,normal 9,tcp,smtp,SF,1686,488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.02,0.00,0.00,0.74,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 11,tcp,smtp,SF,5235,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,129,100,0.78,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.75,0.00,255,1,0.00,0.73,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,9,0.00,0.00,0.00,0.00,0.43,0.10,0.00,255,17,0.07,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,158,443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1317,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,166,0.80,0.40,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,117,8,0.07,0.09,0.01,0.00,0.98,1.00,0.00,0.00,anomaly 2638,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.87,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,54,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,68,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,115,111,0.97,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,136,0.00,0.00,0.00,0.00,1.00,0.00,0.02,254,189,0.74,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,66,0.00,0.00,0.01,0.00,0.99,0.03,0.00,255,66,0.26,0.02,0.26,0.00,0.00,0.00,0.56,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,145,0.57,0.02,0.57,0.00,0.01,0.00,0.02,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6,tcp,telnet,SF,152,116202,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,11,0.14,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,162,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,9,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,324,2178,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,38,255,1.00,0.00,0.03,0.07,0.03,0.01,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.04,0.00,0.96,1.00,0.00,0.96,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,http,SF,286,1267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,116,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,16,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,121,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,71,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,481,481,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,81,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,0.91,0.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.96,0.04,0.00,0.09,0.00,0.87,0.00,anomaly 0,tcp,http,SF,238,311,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,52,52,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,63,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,152,2,0.99,0.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.06,0.01,0.00,0.99,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,28,1.00,0.00,1.00,0.14,0.00,0.00,0.00,0.00,anomaly 2,tcp,smtp,SF,817,481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,3,0.01,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,182,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,32,0.13,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,23,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,40,1,0.03,0.75,0.80,0.00,0.80,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,149,3991,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,23,0.00,0.04,0.00,0.00,1.00,0.00,0.09,18,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,111,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,349,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,11,1.00,0.91,0.00,0.00,0.04,0.07,0.18,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,382,499,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,15,255,1.00,0.00,0.07,0.04,0.07,0.00,0.00,0.00,normal 0,tcp,smtp,SF,130,240,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,88,0.28,0.72,0.01,0.02,0.00,0.00,0.66,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,207,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,275,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,211,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,457,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,http,SF,168,4898,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,2,0.00,0.00,1.00,1.00,0.03,0.54,0.00,239,2,0.01,0.16,0.29,0.00,0.01,0.00,0.49,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.03,0.00,0.97,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,14,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,88,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,136,0.59,0.03,0.59,0.00,0.01,0.00,0.27,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,57,0.22,0.02,0.22,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,7,1.00,0.00,1.00,0.57,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7162,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,24,0.15,0.03,0.15,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,9,0.00,0.00,1.00,1.00,0.06,0.08,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.23,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,12,1.00,0.00,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,38,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 1,tcp,pop_3,SF,52,1565,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,3,0.03,0.08,0.01,0.67,0.01,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,16,1.00,1.00,0.00,0.00,0.13,0.07,0.00,70,16,0.23,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,27928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,157,0.62,0.01,0.62,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,253,1588,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,23,0.00,0.00,0.00,0.00,1.00,0.00,0.17,125,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,94,1,0.01,0.89,0.91,0.00,0.91,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,1875,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2041,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,160,108,0.47,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.02,0.00,0.98,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,1307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,6,183,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,19,1.00,1.00,0.00,0.00,0.26,0.05,0.00,154,39,0.25,0.03,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,18308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,190,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,26,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,4,0.00,0.00,0.00,0.00,0.18,0.18,0.00,255,4,0.02,0.87,0.15,0.00,0.16,0.00,0.70,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,6,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.11,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.14,0.00,0.84,1.00,anomaly 0,tcp,http,SF,254,521,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,191,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,45,45,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,1,1.00,1.00,0.00,0.00,0.04,0.22,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,43,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,11,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,505,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,41,0.04,0.03,0.04,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2577,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,30,115,0.60,0.17,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,3505,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,28,0.00,0.00,0.00,0.00,1.00,0.00,0.14,41,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,339,1444,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,110,0.00,0.00,0.00,0.00,0.92,0.02,0.00,255,180,0.71,0.04,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,200,292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,164,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.01,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,933,344,0,0,0,0,0,1,0,0,0,2,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,241,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,272,769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,131,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,4,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,22158,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,305,502,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,3,1.00,1.00,0.00,0.00,0.50,0.33,0.00,255,58,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,2063,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,11,0.04,0.02,0.04,0.00,0.00,0.00,0.82,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,20,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,285,456,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,20,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,203,1744,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,174,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.67,0.50,0.33,0.50,0.33,0.50,0.00,255,2,0.01,0.02,0.02,0.00,0.02,0.50,0.01,0.50,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,4,1.00,1.00,0.00,0.00,0.25,0.25,0.00,255,60,0.24,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,37,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,16,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,66,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,4580,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,1817,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,308,299,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.12,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,8,1.00,1.00,0.00,0.00,0.67,0.25,0.00,255,68,0.27,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,186,784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,15,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,31,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,214,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 10,tcp,telnet,SF,106,1580,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,1,0.01,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,213,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,50,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,46,0.68,0.00,0.00,0.00,0.32,0.05,0.00,255,46,0.18,0.82,0.18,0.00,0.09,0.00,0.73,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,353,353,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1491,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,4,0.50,0.25,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,18,1.00,0.94,0.00,0.00,0.07,0.07,0.11,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1373,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,121,0.83,0.07,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12,tcp,smtp,SF,1313,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,187,0.68,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,137,122,0.89,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,81,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1066,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,134,0.54,0.03,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,5,1.00,1.00,0.00,0.00,0.08,0.10,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 22,tcp,ftp,SF,288,903,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,2,0.67,0.67,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,15,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,3276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,12,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,12,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,300,476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.06,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,0.00,0.00,0.00,0.00,0.40,0.40,0.00,255,2,0.01,0.23,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,48,0.43,0.02,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,376,4675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,254,1.00,0.00,0.25,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,16,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,150,12632,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,210,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,336,3851,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,74,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4753,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,72,0.28,0.02,0.28,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,316,4704,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,7,255,1.00,0.00,0.14,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,116,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,79,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,3,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,261,1314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1533,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,245,0.95,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.07,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.02,0.00,0.98,1.00,anomaly 0,udp,domain_u,SF,43,116,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,118,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,656,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,15,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 421,tcp,telnet,SF,442,12679,0,0,0,0,0,1,4,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,54,0.21,0.02,0.00,0.00,0.55,0.69,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,25,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,13239,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,75,85,0.45,0.07,0.47,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,7525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,12,0.00,0.00,1.00,1.00,0.18,0.09,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,256,3383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2225,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,21,242,0.86,0.10,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.02,0.00,0.00,0.00,0.07,0.00,0.00,normal 10,tcp,smtp,SF,1299,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,114,0.52,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 4329,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,16,1.00,1.00,0.00,0.00,0.07,0.05,0.00,165,16,0.10,0.07,0.01,0.00,0.92,1.00,0.01,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,94,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,94,0.57,0.02,0.57,0.00,0.00,0.00,0.00,0.00,anomaly 6,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,2,0.06,1.00,0.06,1.00,0.00,0.00,0.83,0.00,anomaly 0,tcp,http,SF,167,9724,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,797,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,47,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,1,0.00,0.00,1.00,1.00,0.01,0.55,0.00,243,1,0.00,0.17,0.30,0.00,0.01,0.00,0.50,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,2,0.00,0.00,0.00,0.00,0.08,0.17,0.00,255,2,0.01,0.84,0.18,0.00,0.10,0.00,0.72,0.00,anomaly 0,tcp,http,SF,237,10246,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,981,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.03,0.00,0.00,0.05,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,10,0.04,0.02,0.04,0.00,0.00,0.00,0.75,0.00,anomaly 0,tcp,http,SF,222,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.15,0.00,0.00,0.64,0.90,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,6509,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,34,195,1.00,0.00,0.03,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,25,1.00,1.00,0.00,0.00,0.09,0.04,0.00,150,25,0.17,0.07,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,92988,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,109,238,0.94,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,7,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1640,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,248,129,0.49,0.01,0.00,0.02,0.81,0.78,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,206,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,177,151,0.85,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,213,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 116,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,5,0.02,0.06,0.00,0.00,0.94,0.00,0.01,0.40,normal 27,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,0.33,0.67,0.50,16,15,0.94,0.12,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,130,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,235,0.00,0.00,0.00,0.00,1.00,0.01,0.00,125,92,0.74,0.02,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,16,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,SF,7,225,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.06,0.00,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,4739,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.01,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,11924,1370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,152,0.90,0.20,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1001,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,115,115,0.43,0.03,0.01,0.02,0.00,0.00,0.03,0.04,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,124,17,0.06,0.04,0.02,0.12,0.01,0.06,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,41,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,214,15150,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,5790,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,13,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,12,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,224,61552,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,250,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,7775,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,43,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,5320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,208,208,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1452,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,146,0.60,0.07,0.01,0.01,0.04,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,280,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,164,3583,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,440,440,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,199,549,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,11271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,17,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,17,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,20,1.00,1.00,0.00,0.00,0.51,0.05,0.00,255,75,0.29,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2408,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,12,0.05,0.71,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,7,243,1.00,0.00,0.14,0.21,0.00,0.00,1.00,0.96,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,166,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,18,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,114,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,15,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,331,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,20,0.98,1.00,0.02,0.00,0.49,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,1944,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.16,0.00,0.00,0.00,0.56,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,13,0.00,0.00,1.00,1.00,0.18,0.06,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,95,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,248,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,219,0.86,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,0.33,1.00,0.00,0.67,4,213,1.00,0.00,0.25,0.04,0.00,0.00,1.00,0.69,normal 0,udp,domain_u,SF,45,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,111,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,15,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,14,0.05,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,5348,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,48,0.00,0.00,0.00,0.00,1.00,0.00,0.06,53,255,1.00,0.00,0.02,0.04,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,251,1841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,874,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,45,0.06,0.07,0.00,0.00,1.00,0.00,0.16,150,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 1,tcp,smtp,SF,1223,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,86,76,0.88,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,488,1,0.08,0.00,0.89,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.10,0.00,0.90,1.00,anomaly 0,tcp,http,SF,298,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,146,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,748,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,3248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,15,2,0.07,1.00,0.07,1.00,0.00,0.00,0.87,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,706,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,1963,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,98,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,43,0.00,0.00,0.02,0.02,1.00,0.00,0.07,86,255,1.00,0.00,0.01,0.10,0.00,0.00,0.33,0.76,normal 0,tcp,http,SF,210,443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,0.10,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,5196,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,43,0.00,0.00,0.00,0.00,1.00,0.00,0.05,230,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,3,1.00,1.00,0.00,0.00,0.03,0.09,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,19,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8,tcp,smtp,SF,3370,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,190,176,0.68,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,16,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,96,0.38,0.20,0.38,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,12,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,146,15634,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,407,407,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,265,309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,33,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,60584,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,0.50,1.00,1.00,198,36,0.11,0.03,0.11,0.06,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,54,0.00,0.00,0.00,0.00,1.00,0.00,0.00,172,78,0.45,0.04,0.45,0.00,0.01,0.00,0.37,0.00,anomaly 1,tcp,smtp,SF,5221,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,195,1.00,0.00,0.33,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,20,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3909,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,70,0.54,0.09,0.61,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,26,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,41,0.21,0.02,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,25,248,1.00,0.00,0.04,0.12,0.00,0.00,1.00,0.98,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,167,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,1.00,1.00,0.00,0.00,1.00,0.00,0.00,17,17,1.00,0.00,0.06,0.00,0.88,0.88,0.00,0.00,anomaly 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,13,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,7,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,13,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,11,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,10,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,198,135,0.68,0.01,0.68,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,26,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,49,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,329,453,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,184,0.00,0.00,0.00,0.00,1.00,0.00,0.01,112,223,0.88,0.02,0.88,0.01,0.00,0.00,0.07,0.00,normal 0,udp,domain_u,SF,43,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,223,0.00,0.00,0.00,0.00,1.00,0.00,0.02,213,196,0.81,0.01,0.73,0.01,0.00,0.00,0.07,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,468,14,0.07,0.00,0.90,1.00,0.03,0.97,0.00,255,13,0.05,0.95,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,17,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,37,0.15,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,9,0.00,0.00,0.00,0.00,0.40,0.13,0.22,255,14,0.05,0.01,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 450,udp,domain_u,SF,93,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,184,138,0.75,0.02,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,227,30,0.01,0.03,0.01,0.97,0.00,0.00,0.01,0.00,anomaly 0,tcp,auth,SF,10,39,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,74,11,0.03,0.05,0.01,0.18,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,19,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,9,141,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,222,13,0.06,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.20,0.00,0.80,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.15,0.00,0.85,1.00,anomaly 0,tcp,http,SF,381,1139,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,664,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,204,124,0.54,0.02,0.00,0.02,0.00,0.00,0.03,0.05,normal 0,udp,domain_u,SF,45,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,20,1.00,1.00,0.00,0.00,0.20,0.06,0.00,121,20,0.17,0.12,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,379,1669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,9320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,387,349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.24,30,231,1.00,0.00,0.03,0.21,0.00,0.00,0.10,0.78,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,192,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,22,0.00,0.00,0.00,0.00,0.96,0.09,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.01,0.01,0.02,0.02,normal 0,tcp,http,SF,233,530,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,91,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,348,5280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.40,1.00,0.00,0.60,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.04,0.04,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,9133,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,272,1190,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,156,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,174,10220,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,8,0.33,0.12,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,udp,private,SF,105,143,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,139,0.55,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,7,255,1.00,0.00,0.14,0.17,0.00,0.00,1.00,0.67,normal 0,tcp,http,SF,327,1165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,2311,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,8,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,509,5071,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,318,318,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,76,0.34,0.01,0.34,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,1,0.10,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,11,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,67,63,0.22,0.07,0.22,0.03,0.00,0.02,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.20,1.00,0.00,0.40,101,101,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.63,0.63,0.00,0.00,0.00,0.63,1.00,anomaly 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,317,0.00,0.00,0.00,0.00,1.00,0.01,0.01,243,203,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,247,1,0.00,0.60,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,182,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,105,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,104,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,202,0.79,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,10,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.52,0.62,0.00,0.00,0.00,0.38,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,81,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,163,35147,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,167,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,48,0.29,0.03,0.29,0.04,0.00,0.00,0.02,0.00,normal 0,tcp,finger,SF,8,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,6,0.07,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,2056,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,3,0.00,0.00,0.00,0.00,0.75,0.50,0.00,211,54,0.19,0.03,0.19,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,2762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,218,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,21,0.08,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,0.99,1.00,0.00,0.00,0.13,0.08,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,16,1.00,1.00,0.00,0.00,0.19,0.07,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,736,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,37,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,3,0.00,0.00,1.00,1.00,0.03,0.08,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,11433,1548,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,72,0.28,0.05,0.00,0.00,0.48,0.00,0.02,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,111,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 13339,tcp,telnet,SF,367,7286,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,105,0.50,0.01,0.00,0.00,0.96,0.95,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,444,444,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,218,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,39,130,1.00,0.00,0.03,0.22,0.00,0.00,1.00,1.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,560,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,6,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,166,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,216,0.85,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,599,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,485,485,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,158,0.63,0.03,0.63,0.00,0.01,0.00,0.25,0.00,anomaly 0,tcp,http,SF,240,1374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,3200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,203,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,222,0.87,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,749,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,10,0.83,0.17,0.83,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,241,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,37,0.34,0.08,0.34,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,26,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1105,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,101,0.67,0.12,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1663,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,59,168,0.85,0.05,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,1,0.06,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.72,0.00,0.00,0.03,0.00,0.49,1.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,248,0.97,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,724,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,149,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,25,1.00,1.00,0.00,0.00,0.17,0.04,0.00,255,25,0.10,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,16,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5062,tcp,ftp_data,SF,5133876,0,0,0,0,3,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,69,0.27,0.08,0.32,0.00,0.01,0.01,0.00,0.00,anomaly 0,tcp,http,S1,256,29200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,313,8110,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,935,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,410,1,0.07,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,http,SF,231,4267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,144,9813,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,90,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,153,8386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,1085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,6,0.00,0.00,0.00,0.00,0.60,0.20,0.00,255,6,0.02,0.86,0.16,0.00,0.03,0.00,0.82,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,25,1.00,0.00,1.00,0.56,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,252,0.99,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,163,5,0.03,0.07,0.01,0.00,0.91,1.00,0.01,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.87,0.86,0.00,0.00,0.00,0.86,1.00,anomaly 0,tcp,http,SF,341,8134,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,166,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,5417,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,45,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,171,8420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.05,0.00,0.95,1.00,0.00,0.96,0.00,255,1,0.00,1.00,0.00,0.00,0.02,0.00,0.98,1.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,9,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,36,101,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,19,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,157,9884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,21,255,1.00,0.00,0.05,0.06,0.00,0.00,0.05,0.06,normal 0,tcp,ftp_data,SF,190,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,2,0.40,0.80,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1233,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,299,2119,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S1,89,2832,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,135,23,0.17,0.53,0.01,0.00,0.05,0.30,0.49,0.04,normal 0,tcp,http,SF,193,383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,10,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,27,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,749,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,190,0.63,0.08,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,10,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,11322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 13904,tcp,telnet,SF,427,47657,0,0,0,0,0,1,157,1,2,179,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 16941,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.54,0.74,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,6676,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 35240,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.58,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,9,0.00,0.00,0.00,0.00,0.31,0.10,0.00,255,9,0.04,0.21,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,15,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,15,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,14,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,15,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,984,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,4794,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,226,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2578,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,184,0.00,0.00,0.00,0.00,1.00,0.00,0.00,101,7,0.07,0.07,0.07,0.00,0.02,0.00,0.62,0.00,anomaly 0,tcp,http,SF,220,584,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,17,0.00,0.00,0.00,0.06,1.00,0.00,0.35,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,193,751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,52,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,3,0.50,0.50,0.67,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,162,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 8655,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.71,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,21,6,0.29,0.24,0.05,0.00,0.05,0.00,0.29,1.00,normal 0,tcp,ftp_data,SF,8766,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,97,1.00,0.00,1.00,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,191,17975,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,207,1.00,0.00,0.10,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,225,7185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,23,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1036,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,58,78,0.50,0.07,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,11,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,373,373,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,18,1.00,1.00,0.00,0.00,0.28,0.06,0.00,255,58,0.23,0.03,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,auth,SF,10,39,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,6,0.02,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,30,21,0.70,0.07,0.03,0.00,0.00,0.00,0.70,1.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,165,165,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 5,tcp,smtp,SF,1000,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,215,162,0.69,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,240,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 25,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,277,21067,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,35,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,255,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,8,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,25,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 398,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,130,1,0.01,0.54,0.80,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,11,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,338,10111,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,14073,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,8,209,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,1397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,308,308,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S1,1680,16934,0,0,0,0,0,1,0,1,2,5,4,0,0,0,0,0,2,1,0.50,1.00,0.50,0.00,0.50,1.00,0.00,255,3,0.01,0.02,0.00,0.00,0.00,0.33,0.74,0.33,normal 0,tcp,http,SF,212,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,253,1.00,0.00,0.50,0.16,0.00,0.00,1.00,0.98,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,16,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,188,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1217,374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,213,0.83,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,6,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,176,5163,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,36,0.86,0.07,0.86,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,157,3990,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.08,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,8,1.00,1.00,0.00,0.00,0.19,0.14,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,413,6825,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,245,1.00,0.00,0.01,0.17,0.00,0.00,0.14,0.69,normal 0,tcp,http,SF,165,7527,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,84,246,1.00,0.00,0.01,0.13,0.00,0.00,0.32,0.51,normal 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,281,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,7,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,10,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,107,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,12,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,12,0.05,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,200,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,1109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,9,1.00,1.00,0.00,0.00,0.64,0.21,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,6,0.00,0.00,0.00,0.00,0.27,0.14,0.00,255,6,0.02,0.61,0.53,0.00,0.00,0.00,0.47,0.00,anomaly 0,tcp,http,SF,212,11193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,4083,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,7,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,7,0.03,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,214,1394,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,216,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,228,0.89,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 550,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.65,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,RSTO,126,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,16,16,1.00,0.00,0.06,0.00,0.06,0.06,0.94,0.94,anomaly 0,tcp,http,SF,250,5966,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,76,0.30,0.04,0.30,0.00,0.12,0.00,0.02,0.00,anomaly 0,tcp,http,SF,198,7003,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,7,255,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2835,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.62,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,2500,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 3209,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.13,0.19,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,156,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,231,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,15360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,255,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1020,358,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,134,0.53,0.06,0.00,0.00,0.02,0.01,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,1,1.00,1.00,0.00,0.00,0.11,0.44,0.00,255,46,0.18,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,39228,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,27,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,7,0.75,0.86,0.25,0.14,0.75,0.38,0.29,255,47,0.18,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,39,0.15,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,116,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,348,2280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,23,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 14101,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,4,0.02,0.58,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,138,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,12,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,253,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,20,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,40,0.16,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,3034,409,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,19,231,0.89,0.11,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,264,3011,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1200,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,132,0.43,0.08,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,19,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,278,1761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,87,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,177,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,4930,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,8,255,1.00,0.00,0.12,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,76,0.35,0.03,0.35,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,303,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,191,2568,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,1830,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,91,0.23,0.04,0.23,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7077,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,92,0.36,0.02,0.36,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,136,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,208,2774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,185,1.00,0.00,0.25,0.08,0.00,0.00,1.00,1.00,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,116,0.83,0.01,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 4380,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,200,1653,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,3775,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,1,0.05,0.00,0.00,0.00,0.05,0.75,0.00,255,1,0.00,0.07,0.45,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,405,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 1228,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.65,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,49,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,19,1.00,1.00,0.00,0.00,0.49,0.05,0.00,41,65,0.46,0.07,0.05,0.03,0.95,0.29,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,19,1.00,1.00,0.00,0.00,0.23,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,275,0.00,0.00,0.00,0.00,0.99,0.01,0.01,200,161,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,88382,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,112,0.44,0.03,0.44,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.05,0.03,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,193,0.76,0.02,0.76,0.00,0.00,0.00,0.18,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,142,255,1.00,0.00,0.01,0.06,0.00,0.00,0.53,0.70,normal 0,tcp,http,SF,296,275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,79,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,264,9819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,453,453,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,8,1.00,1.00,0.00,0.00,0.40,0.20,0.00,100,28,0.28,0.04,0.04,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1484,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,30,0.23,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,8,0.97,1.00,0.03,0.00,0.25,0.16,0.00,255,33,0.13,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,11512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,25,1.00,1.00,0.00,0.00,0.10,0.04,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,6418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.06,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 5,tcp,smtp,SF,1110,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,72,0.56,0.06,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,3413,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,18,0.50,0.11,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,2117,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,6464,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,174,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1688,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.08,0.08,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,113,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,227,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,1615,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,1211,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.06,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.02,0.00,0.98,1.00,anomaly 7130,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.55,0.75,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,18,1.00,1.00,0.00,0.00,0.25,0.08,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,2304,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,1206,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,342,1,0.03,0.00,0.96,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,tcp,http,SF,298,1422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,31,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,310,310,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,3729,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,8585,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,714,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,153,100,0.63,0.04,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,257,3136,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,92,0.93,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,49,0.86,0.04,0.86,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,508,508,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,379,379,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,281,753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,30,255,1.00,0.00,0.03,0.02,0.03,0.01,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,8,0.03,0.07,0.13,0.00,0.00,0.00,0.74,0.00,anomaly 0,tcp,http,SF,316,9737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,1646,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,148,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,40,0.16,0.07,0.16,0.00,0.06,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,7,1.00,1.00,0.00,0.00,0.23,0.13,0.00,255,51,0.20,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,254,555,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,170,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,21,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,15876,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,73,0.38,0.03,0.38,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,205,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,15,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,4758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,10044,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,1,0.09,0.00,0.00,0.00,0.09,0.27,0.00,227,1,0.00,0.04,0.40,0.00,0.02,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,15,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,8,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,187,2922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,23,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,81,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,24,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,1800,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,553,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,35,1.00,0.00,0.03,0.06,0.00,0.06,0.00,0.03,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,1053,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,13389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,270,872,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,6,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,297,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,45,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1094,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,52,175,0.69,0.08,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8766,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,48,0.32,0.04,0.32,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,62,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,62,0.46,0.03,0.46,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,225,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,709,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,57,138,0.32,0.07,0.02,0.01,0.02,0.01,0.00,0.00,normal 0,tcp,http,SF,211,598,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.42,53,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,352,772,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,357,602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.31,5,255,1.00,0.00,0.20,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,206,0.81,0.02,0.81,0.00,0.00,0.00,0.02,0.00,anomaly 0,tcp,http,SF,209,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,13,1.00,0.92,0.00,0.08,0.52,0.09,0.15,183,52,0.28,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,1512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,240,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,252,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,66,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,382,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,85,0.33,0.07,0.35,0.00,0.01,0.04,0.00,0.00,anomaly 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,243,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.64,0.64,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.01,0.00,0.00,0.64,0.05,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,48,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,12,0.00,0.00,1.00,1.00,0.15,0.06,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,18,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,293,5915,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,1,1.00,1.00,0.00,0.00,0.07,0.36,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,58,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,199,33,0.17,0.03,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,17,1.00,1.00,0.00,0.00,0.28,0.07,0.00,255,58,0.23,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,821,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,2,1.00,1.00,0.00,0.00,0.17,0.33,0.00,174,45,0.24,0.02,0.01,0.04,0.99,0.93,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,142,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,28076,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,359,1960,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,276,319,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,216,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,115,0.45,0.08,0.45,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,129,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,286,0.00,0.00,0.00,0.00,1.00,0.01,0.00,176,143,0.81,0.01,0.39,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,631,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,143,0.54,0.12,0.02,0.01,0.00,0.01,0.00,0.00,normal 1031,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,3,0.01,0.60,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1035,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,39,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 22741,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,24,1.00,1.00,0.00,0.00,0.11,0.05,0.00,155,24,0.15,0.07,0.01,0.00,0.91,1.00,0.01,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,153,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 142,tcp,http,SF,237,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,72,255,1.00,0.00,0.01,0.07,0.00,0.00,0.03,0.02,normal 0,tcp,http,SF,202,983,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,149,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,2638,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,20,1.00,1.00,0.00,0.00,0.28,0.06,0.00,255,40,0.16,0.06,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,1800,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,174,2028,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,657,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,178,0.70,0.02,0.70,0.00,0.00,0.00,0.24,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,23,1.00,1.00,0.00,0.00,0.19,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,194,17192,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.07,0.04,0.01,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,75,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,241,2324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 9592,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.41,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,64,2,0.03,0.14,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,151,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,65,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,249,1.00,0.00,0.50,0.10,0.00,0.00,1.00,0.98,normal 0,tcp,http,SF,284,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,163,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,665,344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,168,1.00,0.00,0.14,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.02,0.02,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,81,0.32,0.02,0.32,0.00,0.02,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,249,165,0.66,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,25948,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,19,1.00,0.00,0.12,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,11,1.00,1.00,0.00,0.00,0.44,0.16,0.00,255,61,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,80,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 23,tcp,ftp,SF,295,903,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,27,0.18,0.05,0.01,0.00,0.00,0.00,0.01,0.07,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,10,1.00,0.00,0.10,0.00,0.00,0.00,0.00,0.00,normal 32284,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.81,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,4,0.00,0.00,0.99,1.00,0.03,0.08,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,17,1.00,0.00,1.00,0.18,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,285,619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,714,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,19,0.00,0.00,1.00,1.00,0.15,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,154,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,4,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,6717,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,181,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,266,445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,21,1.00,1.00,0.00,0.00,0.37,0.07,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,82,0.55,0.00,0.00,0.00,0.45,0.04,0.00,255,82,0.32,0.68,0.32,0.00,0.09,0.00,0.59,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,242,0.95,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,6,1.00,1.00,0.00,0.00,0.13,0.13,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,3468,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,1,0.04,0.00,0.00,0.00,0.04,0.09,0.00,255,1,0.00,0.02,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,101,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,3199,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,9,255,1.00,0.00,0.11,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,845,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,128,0.53,0.03,0.00,0.02,0.02,0.02,0.00,0.00,normal 0,tcp,http,SF,234,1244,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,186,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,231,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.09,0.00,0.00,1.00,0.98,normal 0,tcp,http,SF,299,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,100,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,38,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,5,0.02,0.10,0.01,0.40,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,322,6660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.01,0.00,0.01,0.03,0.00,normal 0,tcp,http,SF,195,720,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,46,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,118,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 2,tcp,smtp,SF,2794,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,34,141,0.41,0.09,0.03,0.01,0.00,0.00,0.00,0.04,normal 0,tcp,http,SF,175,18246,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,50,0.20,0.04,0.20,0.00,0.22,0.00,0.02,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,20,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,146,30328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,47,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,241,0.95,0.02,0.00,0.00,0.00,0.00,0.03,0.03,normal 0,tcp,http,SF,273,295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,79,255,1.00,0.00,0.01,0.10,0.00,0.00,0.67,0.69,normal 0,tcp,http,SF,322,642,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,188,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,167,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.36,0.71,0.00,0.00,0.00,0.71,1.00,anomaly 0,tcp,http,SF,302,561,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,63,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,42,0.15,0.23,0.15,0.07,0.31,0.00,0.00,0.00,normal 0,tcp,http,SF,207,1894,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.04,0.00,0.01,0.03,0.01,normal 0,tcp,http,SF,188,1274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,17,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,17,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,237,2557,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,320,7156,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,20,0.00,0.05,0.00,0.05,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,329,1179,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,24,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,21,0.08,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,21,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,184,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 30,tcp,ftp,SF,1227,3380,0,0,0,24,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,60,0.25,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,170,4455,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,234,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,7,1.00,1.00,0.00,0.00,0.12,0.09,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,1473,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,24,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 29,tcp,ftp,SF,1512,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,8,0.20,0.15,0.02,0.00,0.00,0.00,0.00,0.00,normal 682,tcp,telnet,SF,562,2441,0,0,0,0,0,1,13,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,9,0.28,0.12,0.03,0.00,0.03,0.11,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,203,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,anomaly 119,udp,domain_u,SF,89,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,13,0.93,0.14,0.79,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,5280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,272,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,12,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,12,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,13,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.33,1.00,0.33,1.00,0.00,0.67,6,93,1.00,0.00,0.17,0.09,0.00,0.00,1.00,1.00,normal 0,tcp,smtp,SF,1502,341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.33,0.67,1.00,198,134,0.56,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,635,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,14,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,37,0.15,0.08,0.15,0.00,0.07,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,22,1.00,1.00,0.00,0.00,0.19,0.05,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,11624,1551,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,79,0.31,0.05,0.00,0.00,0.44,0.00,0.05,0.03,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,95,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2736,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,194,0.79,0.07,0.04,0.02,0.00,0.02,0.00,0.00,normal 0,tcp,http,SF,323,4675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,65,69,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,803,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,162,19994,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,702,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,52,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,129,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,7,1.00,1.00,0.00,0.00,0.44,0.12,0.00,255,47,0.18,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,230,901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.11,0.11,normal 0,tcp,http,SF,216,2100,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,29,0.00,0.00,0.00,0.00,1.00,0.00,0.21,4,252,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,10723,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,148,35147,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,4070,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,1337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.86,0.85,0.00,0.00,0.00,0.85,1.00,anomaly 0,tcp,http,SF,274,10063,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,162,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1025,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,200,0.89,0.22,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,15,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,1,0.05,0.00,0.94,1.00,0.01,1.00,0.00,255,1,0.00,0.80,0.00,0.00,0.03,0.00,0.60,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.16,0.00,0.00,0.85,0.96,normal 2589,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.84,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,9,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,1617,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,15876,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,68,0.43,0.03,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.75,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,11,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,19,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,74,0.29,0.03,0.29,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,268,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,240,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,557,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,223,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,921,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,245,0.96,0.01,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,53,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,77,0.45,0.04,0.45,0.00,0.01,0.00,0.37,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,8,1.00,1.00,0.00,0.00,0.07,0.08,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,278,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,18,0.00,0.00,0.00,0.00,1.00,0.00,0.28,41,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,167,3370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,82,0.00,0.00,0.00,0.00,0.69,0.05,0.00,255,139,0.55,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,114,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,248,233,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,17,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,15,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,2685,358,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,183,0.77,0.03,0.01,0.01,0.00,0.03,0.00,0.01,normal 0,tcp,http,SF,188,2453,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,9,255,1.00,0.00,0.11,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,1.00,1.00,0.00,0.00,0.20,0.40,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 18,tcp,smtp,SF,12614,1391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,173,0.98,0.04,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,463,9,0.07,0.00,0.90,1.00,0.02,0.98,0.00,255,8,0.03,0.97,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 10009,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,196,2,0.01,0.55,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,6,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,9,1.00,1.00,0.00,0.00,0.33,0.19,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,304,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.12,0.00,0.00,1.00,1.00,normal 1,tcp,smtp,SF,1639,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,60,164,0.57,0.08,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,358,358,0.00,0.00,0.00,0.00,1.00,0.00,0.00,193,99,0.51,0.04,0.51,0.00,0.01,0.00,0.33,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,11,73,1.00,0.00,0.09,0.08,0.00,0.00,1.00,0.99,normal 0,tcp,http,SF,258,8134,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,1215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,162,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,10047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,39,255,1.00,0.00,0.03,0.05,0.03,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,117,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,235,0.92,0.01,0.01,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,3,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,7,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,50,0.86,0.03,0.86,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,330,4793,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,36,255,1.00,0.00,0.03,0.07,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,46,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,129,0.00,0.00,0.00,0.00,1.00,0.00,0.02,247,182,0.74,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,159,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,244,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1096,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,187,134,0.63,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,567,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,2594,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,37,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,10111,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,11,255,1.00,0.00,0.09,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,7462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,0,6361,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,15,0.25,0.20,0.00,0.00,1.00,0.00,0.33,4,255,1.00,0.00,0.25,0.07,0.25,0.01,0.00,0.00,normal 0,tcp,http,SF,327,1811,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1223,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,246,0.96,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,16,0.18,0.05,0.18,0.00,0.00,0.00,0.00,0.00,anomaly 423,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.66,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,368,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,1,1.00,1.00,0.00,0.00,0.01,0.09,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.06,0.00,0.00,1.00,0.96,normal 0,tcp,http,SF,212,2393,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,50,0.34,0.03,0.34,0.04,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,288,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,7,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.67,0.66,0.00,0.00,0.00,0.67,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,161,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,315,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,160,15,0.09,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,191,1938,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,17,255,1.00,0.00,0.06,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,1160,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,245,0.96,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,5,1.00,1.00,0.00,0.00,0.36,0.29,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,206,7903,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,1,0.11,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,0.95,0.00,0.00,0.10,0.00,0.78,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,13,1.00,1.00,0.00,0.00,0.12,0.06,0.00,60,12,0.20,0.10,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,456,456,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,1215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.10,0.10,1.00,0.00,0.00,118,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,355,3465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,67,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,4826,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,S3,309,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,305,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,231,0.91,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,19,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,28,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,119,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,271,389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,234,255,1.00,0.00,0.00,0.01,0.02,0.02,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,14,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 26,tcp,ftp,SF,284,903,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,37,0.28,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,7,276,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,10,0.04,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,26817,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,3,0.50,0.67,0.50,0.33,0.50,0.75,0.67,255,43,0.17,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,25,0.00,0.00,0.05,0.12,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,1403,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,2658,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,2730,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1874,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,38,0.34,0.03,0.34,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,2,0.00,0.00,0.00,0.00,0.12,0.18,0.00,255,2,0.01,0.49,0.56,0.00,0.03,0.00,0.41,0.00,anomaly 0,tcp,http,SF,303,1694,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,14,1.00,1.00,0.00,0.00,0.28,0.12,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,11,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 3,tcp,smtp,SF,1539,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,141,82,0.57,0.07,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,101,22,0.22,0.04,0.22,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,341,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,219,516,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,1186,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.85,0.85,0.00,0.00,0.00,0.84,1.00,anomaly 0,tcp,http,SF,310,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,12,1.00,1.00,0.00,0.00,0.21,0.10,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,1,0.04,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.91,1.00,anomaly 0,tcp,http,SF,156,1493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,2174,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,11737,1549,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,122,0.48,0.02,0.00,0.00,0.36,0.42,0.00,0.00,normal 0,tcp,http,SF,215,2911,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,69,1.00,0.00,0.08,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,2406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,2,255,1.00,0.00,0.50,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,0,1167,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,12,55,1.00,0.00,0.08,0.05,0.08,0.02,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,203,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,207,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,1408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,14,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,10383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 20,tcp,smtp,SF,2063,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,126,130,0.44,0.06,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.57,0.52,0.00,0.01,0.00,0.53,1.00,anomaly 0,tcp,http,SF,277,9463,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1325,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,21,0.95,0.09,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,189,622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,17,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,933,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,53,205,0.83,0.08,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,307,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.02,0.00,0.00,0.00,0.00,0.04,0.04,normal 0,icmp,urh_i,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,195,81,0.25,0.04,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,1748,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,8,99,1.00,0.00,0.12,0.12,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1181,3380,0,0,0,24,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,46,0.18,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8048,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.68,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,9,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,109,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 2,tcp,smtp,SF,926,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,10,200,1.00,0.00,0.10,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,241,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,222,314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,859,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,248,0.97,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,1,0.05,0.00,0.93,1.00,0.01,1.00,0.00,255,1,0.00,0.76,0.00,0.00,0.03,0.00,0.55,1.00,anomaly 0,tcp,http,SF,319,770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,193,1337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5057,tcp,ftp_data,SF,5135678,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,24,1.00,1.00,0.00,0.00,0.29,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,149,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,33,0.13,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9,tcp,smtp,SF,1293,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,172,93,0.54,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,2295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,223,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,11111,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,37,1.00,0.00,1.00,0.11,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,14,1,0.07,1.00,0.07,0.00,0.00,0.00,0.93,1.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,13,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,15,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,113,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,3,1.00,1.00,0.00,0.00,0.30,0.30,0.00,255,63,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,5,1.00,1.00,0.00,0.00,0.12,0.12,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,255,1.00,0.00,0.50,0.22,0.00,0.00,1.00,0.87,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,2055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,693,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,42,255,1.00,0.00,0.02,0.03,0.00,0.00,0.10,0.03,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,7,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1369,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,191,0.94,0.08,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,188,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,19,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,6,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,147,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,13,1.00,0.00,1.00,0.54,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,4,1.00,1.00,0.00,0.00,0.09,0.13,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1342,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,63,0.18,0.02,0.18,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,9,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,2568,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,19,0.07,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 9195,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,338,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,225,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,911,357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,90,51,0.57,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,17,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,291,3643,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 2130,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.69,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,3468,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,1,0.07,0.00,0.00,0.00,0.07,0.13,0.00,56,1,0.02,0.11,0.38,0.00,0.02,0.00,0.00,0.00,normal 15,tcp,smtp,SF,12191,1409,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,90,0.87,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,14,1.00,1.00,0.00,0.00,0.05,0.04,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,3751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,35,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,26,0.10,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,195,1.00,0.00,0.01,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,smtp,SF,848,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,113,171,0.62,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,406,1,0.07,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,20,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,60,0.24,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,340,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,255,1.00,0.00,0.01,0.09,0.00,0.00,0.15,0.55,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,20,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,1.00,1.00,1.00,0.00,0.80,2,255,1.00,0.00,0.50,0.24,0.00,0.00,1.00,1.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.05,0.00,0.94,1.00,0.00,0.96,0.00,255,1,0.00,0.95,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1470,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,67,0.14,0.05,0.14,0.03,0.00,0.22,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,19,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,15,0.00,0.00,0.00,0.00,0.88,0.12,0.00,255,18,0.07,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,637,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,47,0.26,0.02,0.26,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,1928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,60,255,1.00,0.00,0.02,0.07,0.00,0.00,1.00,0.86,normal 0,tcp,http,SF,255,650,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,725,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,160,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1231,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,132,0.55,0.14,0.02,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,251,15764,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,28,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,998,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,48,0.14,0.09,0.14,0.04,0.00,0.00,0.75,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,1056,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,2890,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,34,0.28,0.26,0.50,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 11,tcp,http,SF,219,759,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,14,0.64,0.14,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,16,2,0.06,0.25,0.06,1.00,0.06,0.50,0.00,0.00,normal 0,tcp,http,SF,313,55704,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.13,0.00,0.00,0.80,0.97,normal 0,tcp,http,SF,143,51823,0,0,0,3,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,1341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,88,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 9002,tcp,IRC,RSTR,3135,7806,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,7,2,0.29,0.29,0.14,0.00,0.00,0.00,0.29,1.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.66,0.66,0.00,0.00,0.00,0.66,1.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,63,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.33,0.00,255,24,0.09,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,34,0.00,0.00,0.00,0.00,0.02,0.04,1.00,4,28,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,71,14,0.20,0.14,0.01,0.00,0.80,1.00,0.01,0.00,anomaly 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,147,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 31,tcp,ftp,SF,1075,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,60,0.24,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,33336,2920,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.40,0.40,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,http,SF,322,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,2109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,128,255,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,5,1.00,1.00,0.00,0.00,0.38,0.31,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,2,1.00,1.00,0.00,0.00,0.04,0.09,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,1394,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,389,1,0.07,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.89,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,2,0.00,0.00,0.00,0.00,0.08,0.42,0.00,255,2,0.01,0.43,0.75,0.00,0.00,0.00,0.25,0.00,anomaly 0,tcp,http,SF,319,943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,171,12324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3888,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,105,0.70,0.09,0.70,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.53,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,35,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S1,1419,24871,0,0,0,11,0,1,0,0,0,0,6,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,16,0.06,0.59,0.00,0.00,0.59,0.19,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.64,0.64,1.00,0.00,0.00,29,109,1.00,0.00,0.03,0.18,0.00,0.00,0.86,0.96,normal 0,tcp,http,SF,312,7654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,154,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,175,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,15,1.00,1.00,0.00,0.00,0.09,0.08,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,883,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.87,0.87,0.00,0.00,0.00,0.87,1.00,anomaly 26,tcp,ftp,SF,361,1181,0,0,0,7,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12324,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,75,0.10,0.05,0.10,0.04,0.03,0.00,0.80,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,126,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,273,0.00,0.00,0.00,0.00,1.00,0.01,0.00,163,130,0.80,0.01,0.34,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,9,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,57,0.78,0.22,0.78,0.04,0.00,0.00,0.00,0.00,normal 938,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.42,0.85,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,32,8,0.25,0.19,0.03,0.00,0.56,1.00,0.03,0.00,anomaly 0,tcp,ftp_data,SF,607,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,49,0.20,0.04,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,22,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,333,2346,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,158,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,293,239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,19,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,13,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,2345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.03,0.00,0.00,1.00,0.00,0.07,1,255,1.00,0.00,1.00,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.10,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.18,0.00,0.82,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,466,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,36,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 756,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.62,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,1517,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,9,255,1.00,0.00,0.11,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,291,454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,0.50,1.00,0.50,124,80,0.09,0.06,0.09,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,34,0.13,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1785,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,86,0.34,0.05,0.00,0.00,0.30,0.00,0.02,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,16,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,13,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,217,1371,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,536,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,854,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,10,0.91,0.18,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,70,1,0.01,0.34,0.31,0.00,0.09,0.00,0.31,1.00,anomaly 0,tcp,http,SF,237,302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,16,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,341,11399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,24,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,6329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1388,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,8,0.03,0.59,0.00,0.00,0.00,0.12,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,181,128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,21953,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,51,8127,0,0,0,2,0,1,0,1,0,0,0,0,1,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,SF,6,4,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,0.00,0.50,1.00,0.00,120,1,0.01,0.13,0.01,0.00,0.00,0.00,0.03,0.00,anomaly 0,tcp,http,SF,227,1443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,4760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,35,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,234,1,0.00,0.96,0.97,0.00,0.97,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,7,267,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,3,0.02,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,17,1.00,1.00,0.00,0.00,0.19,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 58,tcp,ftp,SF,1468,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,8,0.18,0.09,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,19,1.00,1.00,0.00,0.00,0.50,0.05,0.00,255,19,0.07,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,305,1543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,65,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,218,4741,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,194,1,0.01,0.75,0.75,0.00,0.03,0.00,0.63,1.00,anomaly 0,tcp,http,SF,182,1422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.18,0.00,0.00,1.00,0.99,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,5887,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,203,1.00,0.00,0.04,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,17,1.00,1.00,0.00,0.00,0.52,0.06,0.00,255,65,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,197,1705,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,226,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,212,917,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,100,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,4282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,47,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,346,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,12,255,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,3934,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1045,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,12,226,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,14,0.09,0.09,0.03,0.14,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,6,1.00,1.00,0.00,0.00,0.43,0.21,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 13141,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,309,277,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,38,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,121,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,40,40,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,8,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,356,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,38,0.00,0.00,0.00,0.00,1.00,0.00,0.11,3,253,1.00,0.00,0.33,0.21,0.00,0.00,0.00,0.80,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,16,1.00,1.00,0.00,0.00,0.11,0.08,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,9768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,79,255,1.00,0.00,0.01,0.09,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,84,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,37,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,177,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2704,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,117,0.46,0.02,0.00,0.00,0.00,0.01,0.00,0.00,normal 11,tcp,auth,SF,10,35,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,10,0.04,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.61,0.00,0.00,0.00,0.00,0.57,1.00,anomaly 0,tcp,http,SF,297,2107,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,226,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,10,1.00,1.00,0.00,0.00,0.77,0.23,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,264,18275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,1301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,53,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,14,255,1.00,0.00,0.07,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,5790,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,161,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.05,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,206,14927,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,17,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1197,508,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,22,175,0.95,0.09,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4436,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,4,0.22,0.28,0.22,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,24,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,3,1.00,1.00,0.00,0.00,0.02,0.09,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,151,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,141,0.76,0.04,0.76,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,179,5670,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,7,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,46,282,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,61,0.40,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,22,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,222,44,0.20,0.03,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,32,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,65,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,4324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,124,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,79,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,2747,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,4,255,1.00,0.00,0.25,0.07,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,623,437,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,148,0.75,0.50,0.25,0.02,0.25,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,155,0.00,0.00,0.00,0.00,0.99,0.03,0.02,255,196,0.77,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,3026,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,23,0.00,0.00,0.00,0.00,1.00,0.00,0.22,9,255,1.00,0.00,0.11,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,ftp_data,SF,35,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,34,0.13,0.56,0.13,0.00,0.56,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,449,449,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,210,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,11,1.00,1.00,0.00,0.00,0.24,0.09,0.00,255,21,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,16,1.00,1.00,0.00,0.00,0.16,0.07,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,4,0.00,0.00,0.00,0.00,0.20,0.15,0.00,255,4,0.02,0.30,0.90,0.00,0.00,0.00,0.10,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 13430,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.64,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,X11,SF,352,592,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,5,1.00,0.00,0.20,0.00,0.20,0.20,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.19,0.00,0.81,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.23,0.00,0.77,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,14,0.00,0.00,1.00,1.00,0.18,0.08,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,2393,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,109,173,0.95,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 432,tcp,telnet,SF,241,1237,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,0.00,0.50,1.00,0.00,255,32,0.13,0.06,0.00,0.00,0.67,0.41,0.03,0.12,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,20,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,72,0.28,0.02,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,2056,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,83,0.27,0.08,0.27,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,162,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,170,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.03,0.00,0.02,1.00,0.03,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,11,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,4,0.00,0.00,0.20,0.25,0.80,0.40,0.00,74,74,1.00,0.00,0.01,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,12,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,186,913,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,39,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,23,0.00,0.00,0.00,0.00,1.00,0.00,0.17,140,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,1650,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,46,0.00,0.00,0.00,0.00,1.00,0.00,0.13,212,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,478,478,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,131,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,206,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,tcp,http,SF,232,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,11,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,67,0.46,0.07,0.46,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,1471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,25,0.10,0.01,0.10,0.00,0.69,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,18,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,25,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,174,33,0.19,0.04,0.19,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,1.00,1.00,0.00,0.00,0.50,1.00,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.52,0.82,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,199,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,85,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 31,tcp,ftp,SF,1486,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,10,0.19,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,212,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,3005,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,12,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,245,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,3636,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1102,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,185,168,0.65,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,57,182,0.58,0.09,0.04,0.01,0.05,0.02,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,99,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,99,0.39,0.02,0.39,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,1.00,1.00,0.00,0.00,0.33,0.67,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,252,2125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,88,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,222,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,231,0.91,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,703,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,1.00,1.00,0.00,0.00,1.00,0.00,0.00,50,11,0.20,0.06,0.02,0.18,1.00,0.91,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,15,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,26,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,107,0.83,0.33,0.83,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,781,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,15,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,10421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,639,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,108,0.95,0.11,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 4400,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,302,13144,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,101,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,10,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,3,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,8,1.00,1.00,0.00,0.00,0.22,0.11,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,95,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,79,0.47,0.06,0.47,0.04,0.03,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,3,1.00,1.00,0.00,0.00,0.33,0.33,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,290,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,251,1.00,0.00,0.50,0.14,0.00,0.00,1.00,0.96,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,195,0.76,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,5,1.00,1.00,0.00,0.00,0.29,0.24,0.00,255,48,0.19,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.24,0.23,0.00,0.00,0.00,0.23,1.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,151,0.59,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,2120,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,normal 36653,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,331,5376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,108,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,1,0.08,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.87,1.00,anomaly 0,tcp,http,SF,268,13560,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,16,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,280,804,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,37,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,14,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,3,1.00,1.00,0.00,0.00,0.60,0.60,0.00,255,65,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,509,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,43,0.23,0.02,0.23,0.00,0.00,0.00,0.00,0.00,anomaly 13,tcp,smtp,SF,1181,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,143,0.59,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,6,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,16,0.99,1.00,0.00,0.00,0.13,0.08,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,6,0.02,0.98,0.02,0.00,0.03,0.00,0.95,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,15,0.98,1.00,0.02,0.00,0.31,0.08,0.00,255,6,0.02,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,117,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,228,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,184,0.72,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1130,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,192,0.71,0.06,0.02,0.02,0.00,0.00,0.00,0.00,normal 4816,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,3,0.01,0.56,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,288,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,19,1.00,1.00,0.00,0.00,0.30,0.06,0.00,255,42,0.16,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,2,1.00,1.00,0.00,0.00,0.14,0.29,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,223,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,3389,494,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,109,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,25,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,229,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,16,0.00,0.00,1.00,1.00,0.41,0.08,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,232,5735,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,249,249,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,2432,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,11,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,150,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1807,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,60,0.24,0.02,0.04,0.00,0.65,0.73,0.00,0.00,normal 38657,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,185,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,11472,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,184,15646,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.93,1.00,anomaly 0,tcp,http,SF,313,2252,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,199,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,81,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,268,3300,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,11,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.99,0.99,0.00,0.00,0.00,0.99,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.05,0.05,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,6273,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,13,1.00,1.00,0.00,0.00,0.24,0.07,0.00,255,64,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTO,159,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,8171,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,182,1953,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,175,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,1463,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,59,0.28,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,3355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,16,1.00,1.00,0.00,0.00,0.23,0.06,0.00,150,37,0.24,0.03,0.02,0.05,1.00,0.97,0.00,0.00,anomaly 0,tcp,http,SF,295,1547,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,47,2,0.02,1.00,0.02,1.00,0.00,0.00,0.94,1.00,anomaly 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,196,2790,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 297,tcp,telnet,SF,208,1820,0,0,0,0,0,1,5,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,13,0.25,0.09,0.02,0.00,0.02,0.08,0.00,0.00,normal 0,udp,domain_u,SF,46,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,37,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,316,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,S3,1416,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,46,169,0.93,0.04,0.02,0.01,0.02,0.01,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,13,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,9910,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,1158,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,24,0.00,0.00,0.00,0.00,1.00,0.00,0.21,73,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,60,0.24,0.02,0.24,0.00,0.02,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,444,444,0.00,0.00,0.00,0.00,1.00,0.00,0.00,185,185,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,20,0.00,0.00,1.00,1.00,0.07,0.05,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,214,0.00,0.00,0.00,0.00,1.00,0.00,0.02,204,196,0.80,0.01,0.72,0.01,0.00,0.00,0.07,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,18,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,31,0.12,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1519,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,38,0.53,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,248,248,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2475,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.45,0.84,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.85,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,2411,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 2333,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.68,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,1078,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,14,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,74,0.29,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,189,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,30,0.00,0.00,0.00,0.00,1.00,0.00,0.17,224,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 3,udp,domain_u,SF,96,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,62,38,0.61,0.05,0.61,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,24,0.53,0.07,0.53,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,7,1.00,1.00,0.00,0.00,0.16,0.09,0.00,255,67,0.26,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,990,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,16,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1133,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,120,0.59,0.14,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,926,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,104,216,0.89,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,169,0.66,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,329,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,5,1.00,1.00,0.00,0.00,0.42,0.33,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,4359,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,3,1.00,1.00,0.00,0.00,0.60,0.60,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,914,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,140,90,0.56,0.05,0.01,0.02,0.01,0.00,0.01,0.00,normal 0,tcp,smtp,SF,678,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,157,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,1.00,1.00,0.00,0.00,1.00,0.00,0.00,11,9,0.82,0.18,0.09,0.00,0.82,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,960,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,33,0.50,0.17,0.50,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,18,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,12,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,22,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,60,0.29,0.01,0.29,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1161,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,83,181,0.41,0.04,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4316,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,32,0.25,0.03,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,10,1.00,1.00,0.00,0.00,0.33,0.07,0.00,32,56,0.31,0.09,0.06,0.04,0.94,0.18,0.00,0.00,anomaly 0,tcp,http,SF,261,1022,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,9,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,309,309,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,10,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,30,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,39,1.00,0.00,1.00,0.15,0.00,0.03,0.00,0.00,anomaly 0,tcp,http,SF,230,620,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,52,0.00,0.00,0.00,0.00,1.00,0.00,0.10,228,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 5,tcp,finger,SF,9,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,217,7,0.03,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,2,0.11,1.00,0.11,1.00,0.00,0.00,0.89,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,22,0.00,0.00,0.00,0.00,0.65,0.09,0.00,255,22,0.09,0.17,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 6,tcp,smtp,SF,2536,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,87,0.87,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,8,1.00,1.00,0.00,0.00,0.21,0.11,0.00,118,46,0.24,0.03,0.02,0.04,1.00,0.61,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,19,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,1012,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,18,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,15,1.00,1.00,0.00,0.00,0.58,0.08,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1004,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,2,0.11,0.32,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.04,0.00,0.00,1.00,0.33,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,423,423,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,296,768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,68,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,19,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,125,3,0.02,0.12,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,20,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,50694,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,2,0.00,0.00,0.00,0.00,0.06,0.22,0.00,255,2,0.01,0.17,0.52,0.00,0.00,0.00,0.42,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,11,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,211,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,211,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,130,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,145,0.86,0.01,0.86,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,176,2,0.01,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,308,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.03,0.03,normal 0,tcp,smtp,SF,906,408,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,215,0.32,0.09,0.05,0.01,0.68,0.00,0.00,0.00,normal 0,tcp,http,SF,221,5549,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 42260,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,176,2,0.01,0.16,0.32,0.00,0.00,0.00,0.32,1.00,anomaly 0,tcp,http,SF,337,1158,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,185,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,323,7355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,232,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,1543,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,81,0.79,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,179,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,56,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,205,8892,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,21,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,4988,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 32,tcp,telnet,RSTO,154,251,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,57,16,0.28,0.11,0.02,0.00,0.02,0.06,0.05,0.19,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,8,1.00,1.00,0.00,0.00,0.18,0.11,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,105,0.41,0.03,0.41,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,17,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3242,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,152,0.89,0.11,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,41,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,316,11415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 638,tcp,X11,SF,1519900,410092,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,1237,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,27,0.11,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 16744,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.65,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,246,162,0.66,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2455,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,154,0.62,0.09,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,547,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,160,1.00,0.00,0.05,0.06,0.00,0.01,0.00,0.01,normal 0,tcp,http,SF,349,2522,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,42,0.00,0.00,0.00,0.00,1.00,0.00,0.12,226,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,35,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,OTH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,151,0.23,0.36,0.34,0.02,0.08,0.03,0.32,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,53,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,15377,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.02,0.03,0.00,0.00,0.00,0.83,0.00,normal 0,tcp,http_8001,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.13,1.00,0.87,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,1.00,0.87,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,3,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,297,2794,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.75,0.75,1.00,0.00,0.00,43,129,1.00,0.00,0.02,0.15,0.00,0.01,0.93,0.87,normal 0,tcp,http,SF,327,650,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,248,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,240,664,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.03,0.03,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,13,1.00,1.00,0.00,0.00,0.36,0.17,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,496,1,0.07,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 1,tcp,smtp,SF,1882,401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,241,159,0.66,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,SF,10,37,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,242,14,0.06,0.02,0.00,0.00,0.00,0.00,0.04,0.00,normal 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,19,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,32,0.13,0.10,0.13,0.00,0.09,0.00,0.00,0.00,anomaly 0,tcp,http,SF,192,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,100,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,1582,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,40,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 14,tcp,telnet,SF,114,7768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,2,0.02,0.07,0.01,0.00,0.01,0.00,0.01,0.50,normal 0,tcp,http,SF,284,1606,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,62,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.10,0.00,0.00,1.00,0.72,normal 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,4,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,209,1958,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,104,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.04,0.02,0.04,0.02,0.00,0.00,normal 0,tcp,http,SF,320,9693,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,normal 0,udp,domain_u,SF,45,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,253,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,225,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,3,0.00,0.00,0.00,0.00,0.75,0.50,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,13,1.00,1.00,0.00,0.00,0.32,0.15,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,158,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1024,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,111,0.51,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,773,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,60,60,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,302,302,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,137,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.00,0.00,0.12,0.38,0.00,255,4,0.02,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,251,1.00,0.00,0.11,0.17,0.00,0.00,1.00,1.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,233,16118,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,133,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,228,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,1231,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,56,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1864,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.58,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,12,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,1.00,1.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,14,0.00,0.00,1.00,1.00,0.17,0.08,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1966,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,203,0.80,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,159,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,3090,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,24,255,1.00,0.00,0.04,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,4296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,21,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,289,3780,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,63,1.00,0.00,0.02,0.08,0.00,0.00,0.02,0.02,normal 0,tcp,http,SF,171,7280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,ftp,SF,1240,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,33,0.13,0.02,0.00,0.00,0.09,0.00,0.00,0.00,anomaly 0,tcp,http,SF,245,2662,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1516,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,183,0.75,0.25,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,4,0.00,0.00,0.00,0.00,0.13,0.13,0.00,255,4,0.02,0.49,0.55,0.00,0.16,0.00,0.29,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,1,1.00,1.00,0.00,0.00,0.01,0.05,0.00,3,1,0.33,0.67,0.33,0.00,0.33,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,865,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,48,1.00,0.00,1.00,0.12,0.00,0.02,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,198,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,12605,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,86,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,12,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 39313,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,216,767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,139,254,1.00,0.00,0.01,0.08,0.00,0.00,0.29,0.61,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,856,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,29,179,0.97,0.07,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,436,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,773,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.71,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,22,0.00,0.05,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 7,tcp,telnet,SF,174,3333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,19,0.09,0.02,0.00,0.00,0.00,0.00,0.03,0.11,normal 0,tcp,http,SF,214,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,137,1.00,0.00,0.01,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.33,1.00,0.33,0.67,0.00,255,1,0.00,0.08,0.06,0.00,0.00,0.00,0.06,1.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,201,58,0.17,0.02,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,444,444,0.00,0.00,0.00,0.00,1.00,0.00,0.00,186,186,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,0.00,0.50,1.00,0.00,14,245,0.29,0.14,0.29,0.25,0.00,0.00,0.07,0.00,anomaly 0,tcp,http,SF,338,4218,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,355,355,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,13,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,38,1.00,0.00,1.00,0.11,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,206,3581,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,14,0.09,0.02,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,247,298,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,10,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,225,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.01,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,73,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,73,0.29,0.02,0.29,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,106,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 58,tcp,smtp,SF,11422,1360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,89,179,0.71,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,86,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,4,1.00,1.00,0.00,0.00,0.44,0.44,0.00,89,24,0.27,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,2924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,8,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,55,0.22,0.02,0.22,0.00,0.02,0.00,0.00,0.00,anomaly 2708,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,3,0.01,0.78,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,186,2143,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,15,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,1109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,114,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,1055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,172,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,11,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,244,611,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,46,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,226,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,776,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,127,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,53,0.07,0.16,0.16,0.04,0.03,0.02,0.00,0.00,normal 37668,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,288,3452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,257,2341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,71,0.00,0.01,0.00,0.00,1.00,0.00,0.11,71,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,232,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,30,0.00,0.00,0.00,0.00,1.00,0.00,0.17,70,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,146,30113,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1504,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,152,0.60,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,27,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,40,0.00,0.00,0.02,0.00,0.98,0.05,0.00,255,40,0.16,0.02,0.16,0.00,0.00,0.00,0.64,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.62,0.62,1.00,0.00,0.00,29,115,1.00,0.00,0.03,0.17,0.00,0.01,0.90,0.85,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,83,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,130,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,14,1.00,1.00,0.00,0.00,0.41,0.06,0.00,255,14,0.05,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,216,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,216,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,126,237,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,85,0.25,0.75,0.01,0.02,0.00,0.00,0.68,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,156,0.61,0.17,0.61,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,363,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,ftp_data,SF,319,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,90,0.35,0.04,0.36,0.00,0.00,0.01,0.00,0.00,normal 22,tcp,ftp,SF,318,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,35,0.31,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1819,384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,69,0.27,0.06,0.00,0.00,0.49,0.00,0.05,0.03,normal 2059,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.62,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,3051,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,86,0.00,0.00,0.00,0.00,1.00,0.00,0.07,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 17,tcp,smtp,SF,876,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,138,186,0.62,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,105,0.41,0.03,0.41,0.00,0.01,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,119,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,3724,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,155,0.88,0.05,0.01,0.02,0.01,0.02,0.00,0.01,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,8,1.00,1.00,0.00,0.00,0.24,0.12,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,10928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,30,1,0.03,1.00,0.03,0.00,0.00,0.00,0.90,1.00,anomaly 23,tcp,ftp,SF,284,903,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,2,0.08,0.16,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,3280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,175,1,0.01,0.94,0.95,0.00,0.95,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,59,42,0.71,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,25,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,178,15764,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,6,255,1.00,0.00,0.17,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,IRC,S1,44788,48103,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,5,4,0.80,0.40,0.20,0.00,0.40,0.50,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,232,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 15,tcp,http,SF,195,178,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,37,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,5,0.38,0.23,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,333,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,20,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,184,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,184,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,21,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,20,1,0.05,1.00,0.05,0.00,0.00,0.00,0.85,1.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,238,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,163,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,74,85,0.76,0.04,0.76,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,11,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,0,12471,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.05,0.05,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,755,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,29,0.00,0.00,0.00,0.00,1.00,0.00,0.10,32,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1065,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,31,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,172,81,0.25,0.02,0.25,0.02,0.00,0.00,0.00,0.00,normal 7412,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.68,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,32,0.13,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,225,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,3,1.00,1.00,0.00,0.00,0.05,0.09,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,284,1410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,246,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,12,0.00,0.00,1.00,1.00,0.17,0.08,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 2,tcp,smtp,SF,1280,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,187,163,0.63,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,252,272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,216,0.85,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 26,tcp,ftp,SF,317,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,42,0.18,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,150,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,100,0.42,0.03,0.42,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,12922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,136,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,11,0.24,0.14,0.24,0.18,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,21,2,0.05,1.00,0.05,1.00,0.00,0.00,0.90,1.00,anomaly 284,tcp,telnet,SF,227,1555,0,0,0,0,0,1,5,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,29,0.19,0.03,0.01,0.00,0.01,0.03,0.01,0.07,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,6,0.00,0.00,0.00,0.00,0.21,0.11,0.00,255,6,0.02,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.61,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,268,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,2,0.50,0.75,0.50,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,11,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,11,0.04,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 8,tcp,smtp,SF,1750,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,198,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,22,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,262,3865,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,23,0.00,0.00,0.00,0.04,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,5,0.00,0.00,0.00,0.00,0.14,0.06,0.00,255,18,0.07,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 276,tcp,http,SF,268,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,16,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,15,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,827,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,199,121,0.53,0.02,0.01,0.02,0.00,0.00,0.03,0.05,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,11,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,11,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,241,668,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,54,54,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 18521,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,147,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.42,0.93,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,ftp,SF,6,54,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.33,0.00,0.17,1.00,0.00,111,1,0.01,0.08,0.01,0.00,0.00,0.00,0.02,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,8,0.00,0.00,0.00,0.00,0.28,0.10,0.00,255,8,0.03,0.87,0.14,0.00,0.10,0.00,0.76,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,177,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1174,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,24,0.09,0.57,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,4306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,33,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,130,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,130,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,68,0.26,0.04,0.26,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,10,1.00,1.00,0.00,0.00,0.10,0.08,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,107,0.20,0.60,0.20,0.02,0.00,0.01,0.00,0.00,normal 2,tcp,bgp,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,2,0.00,0.00,1.00,1.00,0.01,0.53,0.00,255,2,0.01,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,23,19,0.83,0.13,0.83,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,47,47,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,385,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.56,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.44,0.43,0.00,0.00,0.00,0.43,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,2622,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,36,37,0.00,0.00,0.00,0.00,1.00,0.00,0.05,116,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,55,55,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,106,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,18,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,223,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,626,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,51,0.20,0.07,0.00,0.00,0.62,0.00,0.01,0.00,normal 0,tcp,http,SF,294,1214,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,190,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,1375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,112,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,245,0.00,0.00,0.00,0.00,1.00,0.01,0.00,135,102,0.76,0.01,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,12,0.00,0.08,0.00,0.00,1.00,0.00,0.17,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,68,0.24,0.04,0.24,0.03,0.00,0.00,0.00,0.00,normal 31,tcp,ftp,SF,1513,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,41,0.84,0.04,0.84,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,105,0.42,0.06,0.42,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,40,0.12,0.03,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1285,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,17,245,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,1971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,126,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1968,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,342,753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,255,1.00,0.00,0.01,0.02,0.01,0.00,0.01,0.01,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,2,0.02,0.05,0.02,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.15,0.00,0.85,1.00,anomaly 0,tcp,http,SF,192,1069,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,1998,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,9668,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,14,0.00,0.00,0.00,0.00,1.00,0.00,0.36,17,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,340,7802,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,34500,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,304,304,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,193,0.76,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,7,1.00,0.00,1.00,0.29,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,18,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,274,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,118,0.43,0.03,0.43,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,39,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,38,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,59,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,59,0.46,0.05,0.46,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,472,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,230,1.00,0.00,0.33,0.07,0.33,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1863,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,157,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,5480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,12,0.00,0.08,0.00,0.00,1.00,0.00,0.25,85,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,357,767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,198,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,206,4006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,10687,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,371,1062,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,68,215,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,1481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,13,1.00,1.00,0.00,0.00,0.25,0.08,0.00,255,40,0.16,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.85,0.84,0.00,0.00,0.00,0.84,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,204,0.80,0.02,0.80,0.00,0.00,0.00,0.02,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,14,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,166,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,281,0.00,0.00,0.00,0.00,1.00,0.01,0.01,206,167,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,1367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,278,6423,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 708,tcp,telnet,SF,1727,24080,0,0,0,0,0,1,6,0,0,7,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,242,669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,228,0.89,0.07,0.89,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,15,1.00,1.00,0.00,0.00,0.26,0.07,0.00,255,50,0.20,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,271,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,75,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 2585,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.88,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,15,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,55,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,6,1.00,1.00,0.00,0.00,0.19,0.13,0.00,255,65,0.25,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.59,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,75,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,126,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,167,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,179,6654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,31,0.00,0.00,0.00,0.00,1.00,0.00,0.13,140,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,267,3563,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,187,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,7,255,1.00,0.00,0.14,0.06,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1019,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,121,0.67,0.25,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,ftp,SF,1183,2447,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,130,0.51,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,209,0.00,0.00,0.00,0.00,1.00,0.01,0.00,99,66,0.67,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,15511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,1203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1181,436,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,146,0.40,0.05,0.01,0.01,0.00,0.00,0.02,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,8,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,49,131,1.00,0.00,0.02,0.21,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,212,4570,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.33,0.25,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,241,18,0.07,0.06,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,http,SF,142,13258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,50,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,normal 0,tcp,http,SF,221,268,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,24,1,0.04,1.00,0.04,0.00,0.00,0.00,0.96,1.00,anomaly 0,tcp,http,SF,162,3672,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,360,4425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,19,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,11376,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,68,0.29,0.03,0.30,0.00,0.01,0.03,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,14,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,14,0.05,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1309,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,231,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,7,1.00,0.00,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,34,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,77,1.00,0.00,0.50,0.25,0.00,0.00,1.00,1.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,1890,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,37,0.03,0.03,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 45,udp,domain_u,SF,48,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,149,32301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,117,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,19,0.00,0.00,1.00,1.00,0.16,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,227,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,3742,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,32,203,1.00,0.00,0.03,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,2807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,1217,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.06,0.00,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,218,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,10,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,185,19807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.02,0.80,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,74,1,0.01,0.86,0.89,0.00,0.89,1.00,0.00,0.00,anomaly 0,tcp,http,SF,233,31639,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,463,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,http,SF,264,4898,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.03,0.00,0.97,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.05,0.00,0.95,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,14,2,0.07,1.00,0.07,1.00,0.00,0.00,0.93,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,100,15,0.15,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,22,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,14183,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,240,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,10,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,124,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,749,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,129,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,229,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3468,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,29,0.11,0.02,0.11,0.00,0.00,0.00,0.76,0.00,normal 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,285,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,209,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,178,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,177,0.69,0.01,0.69,0.00,0.00,0.00,0.00,0.00,anomaly 454,tcp,telnet,RSTR,492,14334,0,0,0,2,0,1,2,1,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,37,12,0.32,0.11,0.03,0.00,0.00,0.00,0.03,0.08,normal 8675,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.71,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,93,0.48,0.08,0.48,0.02,0.00,0.00,0.02,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,10,1.00,1.00,0.00,0.00,0.03,0.04,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,27,255,1.00,0.00,0.04,0.20,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,256,0.00,0.00,0.00,0.00,1.00,0.00,0.01,99,200,0.85,0.02,0.85,0.01,0.00,0.00,0.11,0.00,normal 0,tcp,http,SF,300,17287,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,881,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,2,1.00,1.00,0.00,0.00,0.04,0.13,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,37,0.16,0.01,0.16,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,7313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,32,0.00,0.00,0.00,0.00,1.00,0.00,0.12,121,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 914,tcp,telnet,SF,765,25284,0,0,0,0,0,1,4,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,6,0.02,0.07,0.00,0.00,0.94,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,1920,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,24,228,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,36,1.00,0.00,1.00,0.08,0.00,0.00,0.00,0.00,anomaly 12,tcp,http,SF,51,8127,0,0,0,2,0,1,0,1,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,14,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,262,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,68,0.32,0.01,0.32,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,64,0.41,0.04,0.41,0.00,0.01,0.00,0.40,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,225,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,232,1197,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,55,87,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,8,0.03,0.01,0.03,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,284,8627,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,175,255,1.00,0.00,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,264,2077,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,62,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,110,0.43,0.19,0.43,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,18,1.00,1.00,0.00,0.00,0.26,0.06,0.00,255,71,0.28,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,1911,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,85,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 310,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.44,0.82,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,18,1.00,1.00,0.00,0.00,0.20,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2537,492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,6,148,0.67,0.33,0.17,0.02,0.67,0.01,0.00,0.00,normal 0,udp,domain_u,SF,46,87,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,179,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,104,1.00,0.00,1.00,0.18,0.00,0.00,1.00,1.00,normal 5,tcp,smtp,SF,2004,403,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,95,0.69,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,9,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,3302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,1,0.00,0.00,0.92,1.00,0.02,1.00,0.00,181,1,0.01,0.39,0.01,0.00,0.00,0.00,0.31,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,5,1.00,1.00,0.00,0.00,0.42,0.17,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,250,774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,2174,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,1,0.00,0.00,0.00,0.00,0.01,0.02,0.00,255,10,0.04,0.02,0.04,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,174,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,24,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.11,0.00,0.00,1.00,0.98,normal 0,tcp,http,SF,293,1257,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3909,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,193,68,0.35,0.03,0.35,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,144,0.56,0.03,0.57,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,232,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.17,0.03,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,tcp,http,SF,209,9696,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,87,0.56,0.09,0.56,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,298,4425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,94,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,9,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,42,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,287,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2850,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,23,22,0.96,0.09,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,262,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1318,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,242,174,0.72,0.03,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,pop_2,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,18,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,294,616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,243,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,36,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,8,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,173,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 378,tcp,telnet,SF,371,11256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,63,0.25,0.02,0.00,0.00,0.80,0.95,0.00,0.00,normal 0,tcp,http,SF,213,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,4998,416,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,59,164,0.58,0.07,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9,tcp,smtp,SF,1465,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,205,0.96,0.07,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,12,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,6,1.00,1.00,0.00,0.00,0.35,0.18,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,179,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 12773,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.66,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.74,0.74,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.01,0.00,0.00,0.74,0.07,normal 0,tcp,smtp,SF,887,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,81,58,0.63,0.07,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,849,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,231,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,777,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,24,0.06,0.04,0.00,0.00,1.00,0.00,0.17,17,255,1.00,0.00,0.06,0.02,0.06,0.01,0.00,0.03,normal 0,tcp,http,SF,220,2159,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,38,0.00,0.00,0.00,0.00,1.00,0.00,0.05,122,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,10432,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,6,255,1.00,0.00,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,26,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,9,1.00,1.00,0.00,0.00,0.04,0.05,0.00,76,9,0.12,0.11,0.01,0.00,0.97,1.00,0.00,0.00,anomaly 0,tcp,http,SF,194,8163,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,24,255,1.00,0.00,0.04,0.04,0.00,0.01,0.00,0.01,normal 0,tcp,http,SF,316,1247,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,132,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,113,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,147,0.00,0.00,0.00,0.00,0.99,0.01,0.02,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,777,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,64,1.00,0.00,0.10,0.06,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,79,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,79,0.31,0.02,0.31,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,234,4721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,1054,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,SF,14,41,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,6,1.00,0.00,1.00,0.33,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,407,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,3876,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,49,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1890,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,235,182,0.70,0.01,0.00,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,350,14276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,52,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,122,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,255,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,211,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,7,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,7,0.03,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,220,10208,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,719,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,153,0.97,0.05,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,18,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,18,0.07,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,1295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,57,230,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,17177,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,4023,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,946,2720,0,0,0,19,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,59,0.24,0.03,0.00,0.00,0.00,0.00,0.00,0.02,normal 0,tcp,smtp,SF,1358,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,41,179,0.95,0.05,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,3,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,5105,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,46,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,25,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,16,1,0.06,1.00,0.06,0.00,0.00,0.00,0.88,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,19,0.21,0.04,0.21,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.20,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,18,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.02,0.02,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,6,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,6,1.00,1.00,0.00,0.00,0.55,0.27,0.00,255,26,0.10,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,52,0.25,0.02,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,388,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,udp,domain_u,SF,44,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,138,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,58,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,11,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,7355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,32,0.00,0.03,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,13,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,2132,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,94,0.37,0.26,0.00,0.00,0.26,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,190,3586,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 6917,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,4,0.02,0.72,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,2222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3468,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,66,0.30,0.02,0.30,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,199,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,632,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1010,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,104,0.31,0.03,0.31,0.02,0.00,0.00,0.01,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,1,0.00,0.00,0.00,0.00,0.08,0.54,0.00,255,1,0.00,0.18,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,40,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,32,0.00,0.00,0.00,0.00,0.54,0.07,0.00,255,97,0.38,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,94,0.90,0.20,0.90,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,4364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,527,7055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,27,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,8491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,5,143,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,domain,SF,48,483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,208,1,0.00,0.00,0.00,0.00,0.00,0.01,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,1695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,966,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,4937,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.50,0.40,0.00,0.00,1.00,0.00,0.60,12,255,1.00,0.00,0.17,0.03,0.08,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,68,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,138,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 23120,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.17,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.56,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,19,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,655,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,49,55,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,14,255,1.00,0.00,0.07,0.14,0.00,0.00,1.00,0.80,normal 0,tcp,http,SF,301,3010,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,255,1.00,0.00,0.01,0.01,0.00,0.00,0.02,0.01,normal 0,tcp,http,SF,219,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,1384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,140,1.00,0.00,0.09,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,5131,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,2077,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,767,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,105,0.50,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,1,1.00,1.00,0.00,0.00,0.00,0.08,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1029,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,135,136,0.65,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,86,0.48,0.04,0.48,0.00,0.01,0.00,0.35,0.00,anomaly 0,tcp,http,SF,339,488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,2007,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.07,0.00,0.00,1.00,0.00,0.14,64,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2581,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,142,0.56,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,13239,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,77,0.39,0.07,0.39,0.03,0.00,0.01,0.00,0.00,normal 161,tcp,http,SF,335,287,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,193,0.89,0.02,0.00,0.00,0.00,0.01,0.00,0.01,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,1722,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,594,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,1724,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.83,1.00,0.17,0.00,0.33,0.50,0.00,255,40,0.16,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.11,0.03,0.05,0.01,0.05,0.00,normal 0,tcp,smtp,SF,608,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,74,0.49,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,147,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,283,1045,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,222,916,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.71,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,1249,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,42,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,13,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,13,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,15,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,8889,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,25,1.00,1.00,0.00,0.00,0.08,0.04,0.00,158,25,0.16,0.06,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,5,1.00,1.00,0.00,0.00,0.62,0.50,0.00,255,66,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,3414,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,108,0.69,0.25,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,98,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,198,3623,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,50,230,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,6,0.00,0.00,1.00,1.00,0.05,0.08,0.00,238,6,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 10706,tcp,telnet,SF,1009,166520,0,0,0,0,0,1,558,1,2,629,0,0,5,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,52,0.20,0.02,0.00,0.00,0.63,0.77,0.00,0.00,normal 0,tcp,smtp,SF,1645,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,216,78,0.29,0.33,0.00,0.03,0.00,0.00,0.31,0.00,normal 0,tcp,http,SF,234,8139,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,12,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,212,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,5,1.00,1.00,0.00,0.00,0.28,0.22,0.00,255,65,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,34,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,255,218,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,2424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,104,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,65,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,12,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,17,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,14052,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,50,0.20,0.02,0.09,0.00,0.34,0.44,0.00,0.00,normal 0,tcp,http,SF,177,10157,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.06,0.00,0.00,0.01,0.06,normal 0,tcp,http,SF,230,452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,3120,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,70,0.00,0.00,0.00,0.00,0.99,0.03,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,2966,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,39751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.05,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,295,526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,39,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,61,2,0.02,1.00,0.02,1.00,0.00,0.00,0.97,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,51,0.66,0.00,0.00,0.00,0.34,0.05,0.00,255,51,0.20,0.80,0.20,0.00,0.09,0.00,0.71,0.00,anomaly 0,tcp,http,SF,280,944,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.44,174,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,8737,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,76,0.38,0.07,0.38,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,170,378,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.07,0.00,0.00,0.00,0.00,normal 22556,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,245,764,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,31,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,70,0.90,0.03,0.90,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,1.00,1.00,0.00,0.00,0.14,0.43,0.00,249,61,0.24,0.02,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,1,0.00,0.00,0.00,0.00,0.06,0.22,0.00,255,1,0.00,0.49,0.56,0.00,0.03,0.00,0.41,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,188,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,20,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,30,0.12,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,8,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,3,0.15,0.10,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,278,2251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,31,45,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,598,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,29468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,201,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,71,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,82,0.02,0.07,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,8,1.00,1.00,0.00,0.00,0.10,0.08,0.00,186,8,0.04,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,48,255,1.00,0.00,0.02,0.02,0.02,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,158,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,106,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,10,1.00,1.00,0.00,0.00,0.05,0.05,0.00,153,10,0.07,0.07,0.01,0.00,0.91,1.00,0.01,0.00,anomaly 21,tcp,telnet,SF,419,26382,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,117,19,0.15,0.03,0.01,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,24,1.00,1.00,0.00,0.00,0.10,0.05,0.00,181,24,0.13,0.07,0.01,0.00,0.92,1.00,0.01,0.00,anomaly 0,tcp,http,SF,225,3876,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,180,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,254,1133,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,246,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,317,317,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,82,0.32,0.20,0.32,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,215,6657,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,5172,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,32,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,0.00,0.00,1.00,1.00,0.00,0.06,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,2095,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,344,1958,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,15,2,0.07,1.00,0.07,1.00,0.00,0.00,0.80,1.00,anomaly 0,tcp,http,SF,299,11783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,307,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,27264,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,15,255,1.00,0.00,0.07,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 15244,tcp,IRC,RSTR,2201,10826,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,4,0.33,0.17,0.08,0.00,0.00,0.00,0.17,0.50,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.14,0.00,0.85,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.87,1.00,anomaly 0,tcp,http,SF,232,755,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,77,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 421,tcp,http,SF,350,128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,10,255,1.00,0.00,0.10,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,305,0.00,0.00,0.00,0.00,1.00,0.00,0.01,153,114,0.75,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6372,tcp,IRC,RSTR,926,6499,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,55,17,0.31,0.04,0.02,0.00,0.02,0.06,0.24,0.76,normal 0,tcp,http,SF,321,14962,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,telnet,SF,105,1479,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,1,0.33,0.67,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,317,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,9,1.00,1.00,0.00,0.00,0.24,0.11,0.00,255,50,0.20,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,344,1114,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,195,0.76,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,90,0.98,0.03,0.98,0.18,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,203,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,43,0.31,0.15,0.31,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,100,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,7,1.00,1.00,0.00,0.00,0.22,0.12,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,4,0.00,0.00,0.00,0.00,0.80,0.40,0.00,255,38,0.15,0.01,0.16,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,34,1.00,0.00,0.03,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,http,SF,227,3552,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,41,0.00,0.00,0.00,0.00,1.00,0.00,0.10,103,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.73,0.35,0.00,0.03,0.00,0.62,0.00,anomaly 0,tcp,http,SF,336,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,101,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,1.00,0.10,1.00,0.00,0.20,6,255,1.00,0.00,0.17,0.07,0.00,0.00,0.17,0.01,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.16,0.00,0.84,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.19,0.00,0.81,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,140,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,291,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,11,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,11,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,246,4686,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,208,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,384,384,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,228,8,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,10,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,10,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,23,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,23,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1784,361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,46,135,0.52,0.09,0.02,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,283,728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,12,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1046,333,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,122,0.69,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,91,0.36,0.03,0.36,0.00,0.06,0.00,0.02,0.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,12,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,256,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,529,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,826,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,100,122,0.76,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,107,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,242,221,0.91,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,20,1.00,0.95,0.00,0.00,0.28,0.07,0.10,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,130,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,198,0.78,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.17,0.00,0.00,0.51,0.85,normal 0,udp,domain_u,SF,45,187,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,203,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,4954,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,6162,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.10,0.10,0.00,0.00,1.00,0.00,0.00,70,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,309,1958,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1168,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,49,0.66,0.11,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,1,0.00,0.00,0.00,0.00,0.04,0.38,0.00,255,1,0.00,0.18,0.53,0.00,0.00,0.00,0.40,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,233,1690,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,18,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,18,0.07,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 38818,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,3235,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,118,0.46,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,189,3284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,208,0.82,0.01,0.82,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,287,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,31,1.00,0.00,1.00,0.13,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,172,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,204,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,771,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,94,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,4,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.02,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,16,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,22,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,7,0.93,0.00,0.00,0.00,0.07,0.07,0.00,255,7,0.03,0.98,0.03,0.00,0.09,0.00,0.89,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,232,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,2590,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,18,0.07,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,18,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,2894,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,53,54,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,7,3,0.43,0.43,0.14,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,4,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,182,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,13,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,5,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,1286,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,2012,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.04,0.23,0.00,0.19,0.00,0.02,0.00,anomaly 0,udp,domain_u,SF,44,119,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,64,0.00,0.00,0.00,0.00,0.98,0.03,0.00,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12983,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,55,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,24716,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,15,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,364,364,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,3231,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,35,0.00,0.00,0.00,0.00,1.00,0.00,0.09,157,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,6,1.00,1.00,0.00,0.00,0.22,0.15,0.00,255,62,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3468,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,55,0.33,0.02,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,710,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,52,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,134,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,272,0.00,0.00,0.00,0.00,1.00,0.01,0.00,162,129,0.80,0.01,0.34,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,3434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,1407,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,14,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,376,245,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,64,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,4966,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.01,normal 0,udp,domain_u,SF,43,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,49,285,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,134,0.67,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 9093,tcp,telnet,SF,2664,16749,0,0,0,0,0,1,2,0,0,2,14,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,20,0.08,0.07,0.00,0.00,0.62,0.00,0.01,0.10,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.56,0.00,0.00,0.00,0.00,0.52,1.00,anomaly 0,tcp,http,SF,161,257,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,255,1.00,0.00,0.25,0.08,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,219,470,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,42,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,1442,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,1857,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,128,114,0.89,0.03,0.01,0.00,0.00,0.00,0.89,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,29,0.11,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,244,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,242,0.95,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,362,3975,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,49,255,1.00,0.00,0.02,0.17,0.02,0.00,0.33,0.80,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,17,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,301,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,15,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,26,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,1,0.00,0.00,0.96,1.00,0.02,1.00,0.00,169,1,0.01,0.37,0.01,0.00,0.00,0.00,0.31,1.00,anomaly 0,icmp,eco_i,SF,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.31,0.00,0.00,0.00,0.00,0.15,0.00,anomaly 0,tcp,http,SF,313,940,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,6023,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.03,0.02,0.01,0.02,0.01,normal 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,213,947,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,255,1.00,0.00,0.01,0.01,0.00,0.00,0.10,0.05,normal 0,tcp,http,SF,297,894,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,15,0.00,0.00,1.00,1.00,0.12,0.07,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,11,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,30,0.12,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,4542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,262,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,1830,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,75,0.54,0.05,0.54,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1433,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,117,138,0.56,0.04,0.01,0.01,0.00,0.00,0.03,0.04,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,92,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,smtp,SF,1936,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,146,0.49,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,131,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,87,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,135,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,225,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10272,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,8,0.03,0.51,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,16372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,70,1,0.01,1.00,0.01,0.00,0.00,0.00,0.94,1.00,anomaly 0,tcp,http,SF,208,757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,50,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1363,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,71,0.34,0.03,0.34,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S2,174,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,5,1.00,0.20,0.00,0.20,1.00,0.00,0.40,72,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,95,5,0.05,0.11,0.01,0.00,0.85,1.00,0.01,0.00,anomaly 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,13,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,144,37654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,2253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,33,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 21,tcp,ftp,SF,234,769,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,175,32,0.18,0.07,0.01,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,295,655,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,1565,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,11,255,1.00,0.00,0.09,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,45,2,0.02,1.00,0.02,1.00,0.00,0.00,0.93,1.00,anomaly 0,tcp,http,SF,330,1537,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,25,0.00,0.00,0.00,0.00,1.00,0.00,0.12,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,2278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,379,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.75,0.00,255,3,0.01,0.58,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,2,0.00,0.00,0.00,0.00,0.08,0.28,0.00,255,2,0.01,0.25,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,226,9703,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,209,10110,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.50,0.25,0.00,0.00,1.00,0.00,0.50,2,255,1.00,0.00,0.50,0.08,0.50,0.01,0.00,0.00,normal 0,tcp,http,SF,290,760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,255,1.00,0.00,0.01,0.02,0.00,0.01,0.21,0.12,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,15,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 36741,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,192,16,0.08,0.03,0.01,0.00,0.00,0.00,0.03,0.12,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,212,4791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,7,255,1.00,0.00,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,19,0.07,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,5,0.96,1.00,0.04,0.00,0.19,0.19,0.00,255,26,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,13,229,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,14,0.08,0.08,0.02,0.21,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,2,0.00,0.00,0.00,0.00,0.11,0.17,0.00,255,21,0.08,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.21,0.00,0.79,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.25,0.00,0.75,1.00,anomaly 0,tcp,http,SF,192,11572,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7077,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,88,0.29,0.05,0.29,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,11,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,303,660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.25,0.20,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,7,1.00,1.00,0.00,0.00,0.54,0.23,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,741,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,148,0.78,0.06,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,340,22965,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,183,1.00,0.00,0.08,0.09,0.00,0.00,0.00,0.00,normal 29,tcp,ftp,SF,1481,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,10,0.37,0.19,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,11,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,11,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,14,1.00,1.00,0.00,0.00,0.30,0.09,0.00,255,54,0.21,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,4,151,1.00,0.00,1.00,0.12,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,255,6912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,39,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,13,213,1.00,0.00,0.08,0.19,0.00,0.00,1.00,1.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,6,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,6,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,308,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,21,0.00,0.00,0.00,0.00,1.00,0.00,0.24,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,1227,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,2,1.00,1.00,0.00,0.00,0.09,0.09,0.00,64,7,0.03,0.06,0.06,0.29,0.97,0.29,0.00,0.00,anomaly 0,tcp,http,SF,216,594,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,19,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,234,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,17,0.00,0.00,1.00,1.00,0.17,0.07,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,199,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,168,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 25910,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 4961,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,173,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,2,0.02,0.04,0.02,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,16,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,67,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,124,1,0.01,0.62,0.61,0.00,0.05,0.00,0.60,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,211,1.00,0.00,0.33,0.19,0.00,0.00,1.00,0.98,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,87,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,309,1,0.07,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.89,1.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,16,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,139,31614,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,69,14,0.20,0.09,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,208,3997,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.04,0.04,anomaly 0,tcp,pop_3,SF,52,1554,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,6,0.03,0.05,0.01,0.33,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,1943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,45,0.63,0.03,0.63,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,1491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,70,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,30,0.00,0.00,0.00,0.00,1.00,0.00,0.17,59,255,1.00,0.00,0.02,0.01,0.02,0.01,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,284,9418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,199,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 20,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,221,1,0.00,0.26,0.24,0.00,0.00,0.00,0.25,1.00,anomaly 0,tcp,http,SF,300,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,404,749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,14,1.00,1.00,0.00,0.00,0.23,0.07,0.00,255,64,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,17,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12324,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,6,0.15,0.10,0.15,0.00,0.00,0.00,0.03,0.00,normal 6,tcp,smtp,SF,1447,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,47,138,0.30,0.04,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,482,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,37,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 17,tcp,smtp,SF,966,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,157,0.69,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,143,1.00,0.00,0.25,0.13,0.00,0.00,1.00,0.85,normal 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,214,14,0.05,0.02,0.00,0.14,0.00,0.00,0.03,0.14,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,310,310,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,219,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,41,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,167,2619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,1329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,139,32424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,237,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,202,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,135,12,0.09,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,4,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,17,0.98,1.00,0.02,0.00,0.26,0.08,0.00,255,37,0.15,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,276,0.00,0.00,0.00,0.00,0.99,0.01,0.01,201,162,0.81,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,38,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,15337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,ftp,SF,1183,2445,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,88,0.35,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.52,0.51,0.00,0.00,0.00,0.51,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,187,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,187,0.73,0.01,0.73,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,450,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,212,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,270,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,29,0.24,0.06,0.24,0.00,0.02,0.00,0.51,0.00,anomaly 0,tcp,ftp_data,SF,1470,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,92,0.36,0.01,0.36,0.00,0.00,0.00,0.00,0.00,normal 29,tcp,ftp,SF,1458,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,40,0.28,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,13,1.00,0.00,1.00,0.31,0.00,0.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,77,0.43,0.03,0.43,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,10,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 6531,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.60,0.85,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,8663,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,190,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,11,1.00,1.00,0.00,0.00,0.26,0.14,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,2764,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,182,0.71,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,112,0.78,0.03,0.78,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,887,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,960,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,6,0.15,0.08,0.15,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1437,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,120,179,0.86,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,33,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,214,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,20,0.08,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,334,1320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,29,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,19,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,4657,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,147,94,0.64,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,191,0.75,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,6,1.00,1.00,0.00,0.00,0.17,0.11,0.00,255,54,0.21,0.04,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,338,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,16,0.00,0.00,0.00,0.06,1.00,0.00,0.19,222,255,1.00,0.00,0.00,0.01,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,331,1397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 32,tcp,ftp,SF,1503,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,113,23,0.20,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,18,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,ftp,RSTO,0,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,1,0.50,1.00,0.50,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,227,349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.02,0.04,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,149,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,979,340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,202,140,0.54,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,754,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,148,0.78,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,41,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,146,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,57408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.09,0.00,0.01,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,289,4080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,248,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,1474,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1104,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,1565,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 15,tcp,smtp,SF,3572,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,238,170,0.71,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,379,2269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,1228,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,13,1.00,0.00,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,87,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,smtp,SF,2493,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,147,0.58,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,182,14,0.08,0.07,0.01,0.00,0.92,1.00,0.01,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,6534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,5776,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,19,201,1.00,0.00,0.05,0.21,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,304,2013,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,19,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,5,46,1.00,0.00,0.20,0.20,0.00,0.00,1.00,1.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,12,1.00,1.00,0.00,0.00,0.22,0.07,0.00,136,35,0.25,0.03,0.03,0.06,0.99,0.91,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,2,0.00,0.00,0.00,0.00,0.10,0.10,0.00,255,9,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,1,0.08,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.63,0.00,0.00,0.03,0.00,0.34,1.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,1,0.13,0.00,0.87,1.00,0.02,1.00,0.00,255,1,0.00,0.49,0.00,0.00,0.03,0.00,0.19,1.00,anomaly 0,tcp,http,SF,214,6204,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,255,1.00,0.00,0.01,0.03,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,20,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 5055,tcp,ftp,SF,1049,2274,0,0,0,20,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,26,0.10,0.02,0.00,0.00,0.12,0.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,12,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,31,0.19,0.02,0.19,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,971,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,192,0.85,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.05,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.05,0.00,0.95,1.00,anomaly 0,tcp,http,SF,346,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,10828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,43,0.00,0.00,0.00,0.00,1.00,0.00,0.14,18,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,164,14875,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,29,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,266,1639,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,223,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,13,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.07,0.00,0.00,0.94,1.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,164,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,201,1031,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,142,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,12689,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,736,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,31,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,652,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,201,1648,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5929,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,118,0.49,0.06,0.49,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,261,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,23,1.00,1.00,0.00,0.00,0.22,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,97,0.72,0.01,0.72,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,16,0.00,0.00,1.00,1.00,0.06,0.05,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,214,1443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,37,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,352,13356,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,2,1.00,1.00,0.00,0.00,0.13,0.33,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,136,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,222,15,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2476,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.50,0.00,0.00,0.00,0.50,1.00,0.00,255,18,0.07,0.86,0.00,0.00,0.85,0.00,0.00,0.00,normal 50,tcp,ftp,SF,1508,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,28,0.27,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,811,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,76,30,0.39,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,3,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,5,243,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,6356,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,39,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,16787,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,9,1,0.11,0.00,0.00,0.00,0.11,0.33,0.00,75,1,0.01,0.11,0.31,0.00,0.01,0.00,0.01,0.00,normal 0,udp,domain_u,SF,45,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,228,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1692,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,31,0.12,0.63,0.12,0.00,0.63,0.00,0.00,0.00,normal 19,tcp,smtp,SF,1264,411,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,198,166,0.57,0.02,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,206,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,342,7208,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,1,0.00,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,187,1,0.01,0.48,0.48,0.00,0.00,0.00,0.47,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,10739,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,11,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,16,1.00,0.00,0.06,0.00,0.12,0.12,0.00,0.00,normal 0,tcp,http,SF,229,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,25519,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 25,tcp,smtp,SF,1716,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,128,0.50,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,40,40,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,500,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,13,1.00,1.00,0.00,0.00,0.37,0.11,0.00,255,65,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,19,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,237,1091,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,977,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,203,0.80,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,479,1,0.07,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,udp,domain_u,SF,46,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,274,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,58,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,213,27544,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,43,47,0.00,0.00,0.00,0.00,1.00,0.00,0.06,252,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,6758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,2531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,89,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,4898,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,461,461,0.00,0.00,0.00,0.00,1.00,0.00,0.00,197,197,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,18,1.00,0.00,0.06,0.00,0.11,0.11,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,13,1.00,1.00,0.00,0.00,0.06,0.05,0.00,160,13,0.08,0.08,0.01,0.00,0.91,1.00,0.01,0.00,anomaly 1,tcp,smtp,SF,942,374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,214,106,0.39,0.02,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,17,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,3211,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,4,0.00,0.00,1.00,1.00,0.03,0.08,0.00,255,4,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 27,tcp,ftp,SF,1524,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,5,0.05,0.95,0.01,0.40,0.00,0.00,0.87,0.40,normal 0,tcp,http,SF,211,442,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,217,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,11524,921,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,173,0.75,0.50,0.25,0.01,0.25,0.01,0.00,0.00,normal 0,tcp,imap4,SF,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,4,125,0.50,0.75,0.00,0.04,1.00,0.00,0.36,10,10,1.00,0.00,0.80,0.00,0.50,0.50,0.00,0.00,anomaly 0,tcp,smtp,SF,1983,494,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,68,190,0.94,0.04,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,84,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,141,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,3867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,217,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,460,460,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,237,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 4721,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,1,1.00,1.00,0.00,0.00,0.05,0.14,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,1674,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,http,SF,313,469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,4,255,1.00,0.00,0.25,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,1.00,1.00,1.00,0.00,1.00,8,255,1.00,0.00,0.12,0.21,0.00,0.01,1.00,0.99,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,6,1.00,1.00,0.00,0.00,0.19,0.12,0.00,112,44,0.23,0.04,0.01,0.05,1.00,0.59,0.00,0.00,anomaly 0,tcp,http,SF,303,662,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,55,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2926,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,95,0.52,0.07,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,1244,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,41,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,210,1,0.00,0.95,0.96,0.00,0.96,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S2,246,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,1,57,1.00,0.00,1.00,0.12,1.00,0.02,0.00,0.00,anomaly 2845,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.65,0.95,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,721,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,157,117,0.75,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,116,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,175,0.69,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1904,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,22,0.09,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,20,0.00,0.00,1.00,1.00,0.18,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,1,0.17,0.33,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,4,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,8,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1206,3380,0,0,0,24,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,38,0.15,0.08,0.00,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,157,18961,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,24,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,24,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,343,6901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.04,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,206,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,36,0.14,0.47,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,269,2232,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,1603,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,146,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,4359,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,251,1.00,0.00,0.08,0.06,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,223,431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,217,37,0.17,0.03,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2580,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.87,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,3,0.90,1.00,0.10,0.00,0.30,0.40,0.00,255,3,0.01,0.08,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,90,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,613,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,115,178,0.77,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,3731,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,134,255,1.00,0.00,0.01,0.03,0.00,0.00,0.01,0.00,normal 727,tcp,telnet,SF,587,18961,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.02,0.00,0.00,0.73,0.88,0.00,0.00,normal 9801,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,1030,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,79,0.83,0.25,0.83,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,4041,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,44,0.00,0.00,0.00,0.00,1.00,0.00,0.09,109,255,1.00,0.00,0.01,0.05,0.00,0.00,0.33,0.55,normal 0,tcp,http,SF,202,3810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,14,1.00,0.00,0.12,0.21,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,6107,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.01,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,2353,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,255,150,0.59,0.03,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,213,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,60,1.00,0.00,0.09,0.20,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,376,642,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,967,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,208,0.94,0.11,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,29954,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,38,0.15,0.06,0.15,0.00,0.74,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.25,0.25,1.00,0.00,0.00,136,136,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,101,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,11759,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,14,1.00,1.00,0.00,0.00,0.06,0.04,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2200,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,121,0.72,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,939,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,2901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,32,0.00,0.09,0.00,0.00,1.00,0.00,0.22,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 55,tcp,http,SF,243,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,384,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,33,0.00,0.00,0.00,0.00,1.00,0.00,0.12,39,231,1.00,0.00,0.03,0.21,0.00,0.00,0.08,0.77,normal 0,tcp,http,SF,214,1600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,5637,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,telnet,SF,104,1410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,2,0.01,0.04,0.01,1.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,SF,36,197,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.05,0.00,0.00,0.39,0.00,0.05,0.00,anomaly 0,tcp,smtp,SF,647,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,19,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,3067,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,18,255,1.00,0.00,0.06,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,297,3073,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,telnet,SF,179,3393,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,9,0.10,0.78,0.01,0.00,0.00,0.00,0.73,0.11,normal 0,tcp,http,SF,294,1600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 6284,tcp,IRC,RSTR,934,9562,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,26,7,0.27,0.12,0.04,0.00,0.00,0.00,0.27,1.00,normal 0,tcp,http,SF,301,3654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,15,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,19,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,9,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,6,0.02,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,5197,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,1481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,453,453,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,24,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,192,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,43,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,43,0.17,0.02,0.17,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,0,20256,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.14,0.14,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.05,0.14,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,220,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,123,0.57,0.03,0.57,0.00,0.01,0.00,0.29,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,2199,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,12,0.00,0.00,0.00,0.00,1.00,0.00,0.42,55,255,1.00,0.00,0.02,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,123,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,68,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 931,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,26,0.10,0.12,0.10,0.00,0.12,0.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,6418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,48,0.19,0.04,0.19,0.00,0.23,0.00,0.02,0.00,anomaly 0,tcp,http,SF,313,3247,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.14,0.14,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.14,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,18,1.00,1.00,0.00,0.00,0.26,0.06,0.00,255,48,0.19,0.05,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,86,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,238,0.93,0.02,0.00,0.00,0.01,0.00,0.02,0.02,normal 0,tcp,http,SF,234,1038,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,18,0.00,0.00,0.00,0.00,1.00,0.00,0.28,193,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,3,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,18,1.00,1.00,0.00,0.00,0.31,0.07,0.00,255,66,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,715,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,66,0.65,0.03,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,3,1.00,1.00,0.00,0.00,0.20,0.27,0.00,97,55,0.24,0.04,0.01,0.04,0.98,0.42,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,8,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,15876,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,92,0.39,0.04,0.39,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,162,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,373,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,82,0.32,0.02,0.32,0.00,0.00,0.00,0.00,0.00,normal 26,tcp,ftp,SF,1496,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,7,0.20,0.14,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,16,1.00,1.00,0.00,0.00,0.59,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,1758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,1528,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,333,2526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,234,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.01,0.92,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,274,1417,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,4,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,4,0.10,0.05,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,25,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,89,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,207,71,0.25,0.02,0.25,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,259,505,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,642,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,252,148,0.59,0.02,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,14,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,49,49,1.00,0.00,0.02,0.00,0.00,0.00,0.02,0.02,anomaly 0,icmp,ecr_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1750,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,50,185,0.68,0.06,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.01,1.00,0.99,0.00,anomaly 0,tcp,http,SF,194,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,36,0.00,0.00,0.00,0.00,1.00,0.00,0.08,102,215,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,1256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,25,0.00,0.00,0.00,0.00,1.00,0.00,0.20,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,14,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,1440,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,42,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,3,1.00,0.00,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,20,1.00,1.00,0.00,0.00,0.26,0.05,0.00,255,62,0.24,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.58,0.00,0.00,0.00,0.00,0.53,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.15,0.00,0.00,1.00,1.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,334,1,0.03,0.00,0.96,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,15,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,12,0.00,0.00,0.00,0.00,0.60,0.20,0.00,255,12,0.05,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,298,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,18,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,174,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,20,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,202,8104,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,25,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,20,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,159,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,170,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1053,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,152,0.69,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,369,4154,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,83,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 14,udp,domain_u,SF,111,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,3,0.75,0.50,0.75,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,127,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1721,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.02,0.00,0.00,0.52,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,45,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,130,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,38,0.67,0.33,0.67,0.16,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,297,534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,938,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,30,255,1.00,0.00,0.03,0.05,0.03,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,137,2,0.01,0.08,0.01,0.00,0.90,1.00,0.01,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,15,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,274,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,4220,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,5,255,1.00,0.00,0.20,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,298,947,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.09,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,258,1747,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,95,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,158,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,17,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,58,0.23,0.03,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,3751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,23,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,410,6726,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,247,1.00,0.00,0.01,0.12,0.00,0.00,0.09,0.49,normal 3,tcp,smtp,SF,1508,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,6,66,1.00,0.00,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,auth,SF,10,35,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,9,0.04,0.03,0.01,0.22,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,17,0.07,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,211,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,49,1.00,0.00,0.02,0.00,0.00,0.00,0.24,0.24,anomaly 0,tcp,http,SF,226,2471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,18,0.00,0.00,1.00,1.00,0.18,0.07,0.00,255,17,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,305,1035,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,58,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,81,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,637,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,107,0.42,0.02,0.42,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,137,1,0.01,0.93,0.94,0.00,0.94,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,116,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,249,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,1792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,312,3327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,141,255,1.00,0.00,0.01,0.02,0.00,0.01,0.01,0.03,normal 0,tcp,ftp,SF,1231,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,226,54,0.24,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,udp,domain_u,SF,32,92,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,0.50,1.00,0.33,75,13,0.17,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 14360,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,123,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,203,0.80,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,48,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,148,0.58,0.42,0.58,0.00,0.09,0.00,0.33,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,40,0.16,0.01,0.67,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,15252,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S1,456980,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,62,50,0.10,0.05,0.10,0.04,0.02,0.06,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,869,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,28,66,0.96,0.07,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,93,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,273,4471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,28,0.00,0.00,0.00,0.00,1.00,0.00,0.18,28,255,1.00,0.00,0.04,0.07,0.00,0.00,0.21,0.64,normal 0,udp,domain_u,SF,44,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,137,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,487,487,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1068,320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,48,0.75,0.25,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,231,1.00,0.00,0.25,0.05,0.00,0.00,1.00,0.72,normal 0,tcp,smtp,SF,1162,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,80,0.82,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,62,0.29,0.02,0.29,0.00,0.00,0.00,0.00,0.00,normal 40295,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.44,0.87,0.00,0.00,0.00,0.87,1.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,1845,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,17,0.00,0.00,1.00,1.00,0.13,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,14,0.00,0.00,1.00,1.00,0.22,0.06,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,308,4297,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,709,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,4240,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,9,1.00,1.00,0.00,0.00,0.22,0.10,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,95,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,850,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,115,0.45,0.04,0.00,0.00,0.11,0.00,0.02,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.63,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,239,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,57,23,0.40,0.11,0.02,0.00,0.96,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,7071,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2530,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,2,0.00,0.00,0.00,0.00,0.17,0.25,0.00,255,2,0.01,0.61,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,866,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1979,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,93,119,0.33,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,2,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27421,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,656,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,250,1.00,0.00,0.05,0.13,0.00,0.00,0.59,0.50,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,14,1.00,1.00,0.00,0.00,1.00,0.00,0.00,54,15,0.26,0.06,0.02,0.13,1.00,0.93,0.00,0.00,anomaly 0,tcp,http,SF,215,956,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,23,1.00,0.26,0.00,0.00,0.03,0.07,0.09,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,150,11802,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,250,1.00,0.00,1.00,0.02,0.00,0.00,1.00,0.16,normal 0,tcp,http,SF,337,2055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,49,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,118,0.46,0.04,0.47,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,55,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,213,13357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,24,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,15,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,214,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,189,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,2498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,268,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,149,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,9,1.00,1.00,0.00,0.00,0.22,0.10,0.00,255,49,0.19,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.04,0.00,0.96,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.05,0.00,0.95,1.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,47,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,108,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,5336,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,81,0.44,0.02,0.44,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,488,10161,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,255,1.00,0.00,0.00,0.02,0.01,0.01,0.08,0.08,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,328,413,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,38,1.00,0.00,0.50,0.24,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,1,1.00,1.00,0.00,0.00,0.02,0.09,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,69,0.41,0.04,0.41,0.03,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,242,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,83,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,131,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,normal 38384,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,57,0.27,0.18,0.27,0.04,0.00,0.02,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,4,0.92,1.00,0.08,0.00,0.15,0.15,0.00,255,5,0.02,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,429,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.56,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 38,tcp,telnet,SF,573,293300,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,14,0.11,0.04,0.01,0.14,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,21,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,2,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,2,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,265,7065,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,1622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,113,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,765,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,34,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,476,476,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,86,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,39,0.00,0.00,0.00,0.00,0.59,0.06,0.00,255,103,0.40,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.23,0.00,0.76,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.24,0.00,0.73,1.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,15,1.00,1.00,0.00,0.00,0.16,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,524,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,0.99,1.00,0.00,0.00,0.01,0.08,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,866,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,39,0.00,0.00,0.00,0.00,1.00,0.00,0.05,80,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,1,1.00,1.00,0.00,0.00,0.04,0.17,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,190,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,1274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,45,0.00,0.00,0.00,0.00,1.00,0.00,0.04,39,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.14,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,250,2296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,23,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,19,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,16,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,16,1.00,1.00,0.00,0.00,0.31,0.08,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,53,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.51,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,280,1288,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,54060,2920,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.25,0.25,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,279,602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,72748,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,80,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,283,1346,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,6194,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,24,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,1357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,54,0.00,0.00,0.00,0.00,1.00,0.00,0.07,148,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,2936,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,2881,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,46,0.18,0.02,0.18,0.00,0.53,0.00,0.00,0.00,normal 1,tcp,smtp,SF,742,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,150,208,0.82,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,1422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,61,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,2,0.50,1.00,0.50,1.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,11,1.00,1.00,0.00,0.00,0.50,0.09,0.00,255,67,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,340,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,68,0.60,0.03,0.60,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,330,1024,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.75,0.00,255,3,0.01,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,58,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,793,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,173,106,0.48,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,1502,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,13,0.25,0.11,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,18,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,207,786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,448,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,98,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 4,tcp,smtp,SF,11716,1459,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,58,176,0.90,0.05,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,3,27,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,108,0.42,0.03,0.42,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,19,0.00,0.00,0.00,0.00,0.90,0.10,0.00,255,28,0.11,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,203,495,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 11,tcp,smtp,SF,1637,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.25,0.00,0.00,1.00,0.00,0.75,148,97,0.66,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,77,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S1,54540,4380,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,245,1,0.00,0.33,0.31,0.00,0.00,0.00,0.32,1.00,anomaly 0,tcp,http,SF,288,1604,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,28,0.00,0.00,0.00,0.00,0.97,0.07,0.00,255,28,0.11,0.53,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,53,0.21,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,210,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,213,188,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,566,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,129,0.51,0.50,0.51,0.00,0.09,0.00,0.41,0.00,anomaly 0,tcp,smtp,SF,667,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,129,0.48,0.01,0.00,0.02,0.82,0.78,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,9,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,18,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,180,1745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,363,1,0.06,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.90,1.00,anomaly 0,tcp,http,SF,307,288,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,28,0.00,0.00,0.10,0.04,1.00,0.00,0.14,41,255,1.00,0.00,0.02,0.06,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,196,18700,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,41,0.00,0.00,0.00,0.00,1.00,0.00,0.07,118,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,111,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,129,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,129,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,5,0.04,0.09,0.02,0.40,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,17,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,13,0.76,0.12,0.76,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,7,0.00,0.00,0.00,0.00,0.26,0.09,0.29,255,27,0.11,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,404,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,200,672,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,33,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,2531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,191,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,24786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,156,876,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,241,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,8,1.00,1.00,0.00,0.00,0.29,0.11,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1019,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,245,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8359,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.62,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,260,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,220,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,28,0.11,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,3376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,255,1.00,0.00,0.00,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,272,11744,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,182,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,201,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,34,0.14,0.05,0.14,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,5,1.00,1.00,0.00,0.00,0.36,0.14,0.00,255,45,0.18,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,16,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.00,0.00,0.12,0.38,0.00,255,4,0.02,0.01,0.16,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,3058,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,4062,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 41307,tcp,gopher,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.28,0.55,0.00,0.00,0.00,0.55,1.00,anomaly 0,tcp,ftp_data,SF,201,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,44,0.44,0.19,0.44,0.05,0.06,0.00,0.00,0.00,normal 0,tcp,http,SF,213,775,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,166,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,9,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,24,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,3,1.00,1.00,0.00,0.00,0.23,0.38,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,203,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,77,0.52,0.03,0.52,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,1292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,136,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,225,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,21,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,21,0.08,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,93,0.89,0.09,0.89,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,74,1.00,0.00,0.50,0.05,0.00,0.01,1.00,0.99,normal 0,tcp,http,SF,323,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,2705,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.02,0.02,0.00,0.00,0.00,normal 58,tcp,smtp,SF,2599,485,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,511,1,0.00,0.00,0.00,0.00,0.00,0.00,0.00,255,4,0.02,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,271,583,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,1.00,1.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,1111,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,90,0.98,0.04,0.98,0.24,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,1042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,7203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,14884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,373,3040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,10,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,205,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,10366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,125,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,848,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,135,0.88,0.25,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,427,427,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,10,273,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,15,0.05,0.03,0.01,0.13,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,7,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,2,1.00,1.00,0.00,0.00,0.10,0.30,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,284,500,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,10541,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,2333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.08,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,15,0.14,0.06,0.14,0.00,0.02,0.00,0.58,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,2,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,18,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,22,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,239,0.94,0.01,0.94,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,16,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8,tcp,telnet,SF,137,1609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,345,713,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,135,1.00,0.00,0.10,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,1215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,25,0.00,0.00,0.07,0.04,1.00,0.00,0.08,164,255,1.00,0.00,0.01,0.03,0.00,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,12,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,154,25,0.16,0.03,0.16,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,16,1.00,1.00,0.00,0.00,0.23,0.06,0.00,255,49,0.19,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,1,0.03,0.13,0.03,0.00,0.03,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,229,830,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,176,3871,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,37,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,127,92,0.72,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,2,0.00,0.00,0.00,0.00,0.09,0.36,0.00,255,2,0.01,0.65,0.46,0.00,0.00,0.00,0.54,0.00,anomaly 0,tcp,http,SF,235,1028,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,38,199,1.00,0.00,0.03,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,139,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,28,0.90,0.10,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,9142,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,5759,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,115,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1331,331,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,187,0.67,0.02,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,172,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,23,0.11,0.03,0.11,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,9,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,1977,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,2061,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,377,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,10,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,190,14358,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,19,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,16319,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,43,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,240,416,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,942,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,189,159,0.63,0.03,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,remote_job,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,3,0.78,0.67,0.22,0.33,0.04,0.37,0.00,255,3,0.01,0.12,0.32,0.00,0.25,0.67,0.07,0.33,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,4815,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,18,0.00,0.00,1.00,1.00,0.17,0.08,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.50,0.50,1.00,0.00,0.00,8,253,1.00,0.00,0.12,0.16,0.00,0.00,0.62,0.69,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,9,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,12,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,19,0.00,0.00,1.00,1.00,0.42,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,59,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,159,0.62,0.38,0.62,0.00,0.09,0.00,0.29,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,6,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,158,4030,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,255,1.00,0.00,0.00,0.02,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,234,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,4435,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,77,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2420,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.86,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,21,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,277,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,239,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,319,879,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,11,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,300,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,36,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,159,138,0.87,0.03,0.01,0.00,0.00,0.00,0.87,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,6,1.00,1.00,0.00,0.00,0.43,0.36,0.00,255,8,0.03,0.10,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,141,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,1490,407,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,171,0.80,0.08,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,14,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,101,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.04,normal 5,tcp,smtp,SF,3007,334,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,39,124,0.85,0.08,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,667,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,6489,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,24,0.44,0.04,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,188,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 25,udp,domain_u,SF,48,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,238,0.93,0.01,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,206,49083,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,6,144,1.00,0.00,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,1976,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,332,887,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 2289,tcp,X11,SF,7665876,1281000,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,1,0.01,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,161,9533,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,229,2524,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,1350,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,30,1.00,0.00,0.08,0.07,0.00,0.00,1.00,1.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,231,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,233,2593,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,225,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,178,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,19,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S1,90,2832,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,155,29,0.19,0.46,0.01,0.00,0.08,0.45,0.43,0.03,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,118,0.83,0.01,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,238,9257,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,44,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,863,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,17,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,41,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,219,0.00,0.00,0.00,0.00,1.00,0.01,0.00,109,76,0.70,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,177,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,274,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,10,0.20,0.20,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,263,3625,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,37,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,263,1630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,226,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.55,0.00,0.00,0.00,0.00,0.50,1.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,193,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,214,860,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,79,81,0.00,0.00,0.00,0.00,1.00,0.00,0.02,208,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.03,0.00,0.02,1.00,0.03,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,130,0.51,0.03,0.51,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,882,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.20,0.20,1.00,0.00,0.00,135,135,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,2,0.06,0.06,0.06,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,1002,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,255,1.00,0.00,0.02,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,3,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1521,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,123,0.58,0.25,0.08,0.02,0.00,0.33,0.00,0.00,normal 0,tcp,http,SF,176,497,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,203,255,1.00,0.00,0.00,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,17,1.00,1.00,0.00,0.00,0.14,0.07,0.00,123,17,0.14,0.08,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,60,5,0.08,0.10,0.02,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,18,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,242,13278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,151,7,0.05,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,976,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,6860,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.01,normal 0,tcp,smtp,SF,2972,371,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,27,171,0.89,0.11,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,5,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,1817,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,9,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,208,1187,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,16,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,104,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,340,649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,17,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,35,0.14,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3482,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,27,0.14,0.02,0.14,0.07,0.00,0.00,0.00,0.00,normal 7850,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.63,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,794,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,105,0.56,0.04,0.01,0.02,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,304,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,17,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,161,1.00,0.00,0.17,0.16,0.00,0.00,1.00,0.98,normal 0,tcp,http,SF,232,1707,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,16,0.12,0.03,0.12,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,auth,SF,10,35,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,93,19,0.14,0.04,0.01,0.16,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,224,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.55,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,5399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,7,1.00,1.00,0.00,0.00,0.88,0.25,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,18376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,926,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,26,255,1.00,0.00,0.04,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,10389,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,1.00,0.00,218,1,0.00,0.07,0.39,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1113,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,35,13,0.37,0.06,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,184,1831,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.12,1.00,0.00,0.25,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,34,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,134,111,0.83,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,32,1.00,0.00,0.03,0.00,0.03,0.03,0.03,0.03,anomaly 0,tcp,http,SF,176,460,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,1688,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,332,12343,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,224,17,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,8,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,257,7143,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,1154,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,72,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,1404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.09,0.00,0.00,0.34,0.65,normal 41218,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.29,0.57,0.00,0.00,0.00,0.57,1.00,anomaly 0,tcp,http,SF,219,2828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,2462,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,206,0.74,0.02,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,43,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,240,0.94,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,367,3200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,169,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 4,tcp,ftp_data,SF,832,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,17,52,1.00,0.00,1.00,0.12,0.00,0.02,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,18,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,121,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1207,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,197,159,0.70,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,3534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,48,0.00,0.00,0.00,0.00,1.00,0.00,0.08,14,255,1.00,0.00,0.07,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,489,489,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,4142,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.03,0.33,0.00,0.00,0.00,normal 0,tcp,http,SF,242,753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,222,0.87,0.01,0.87,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,186,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,8,1.00,1.00,0.00,0.00,0.17,0.12,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.29,0.38,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,http,SF,248,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,44,1.00,0.00,1.00,0.16,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,30,1.00,0.00,1.00,0.20,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,258,1955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,120,215,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,747,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,101,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,310,310,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,220,0.86,0.09,0.86,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,277,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,26,0.00,0.00,0.00,0.08,1.00,0.00,0.12,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,800,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,145,0.57,0.02,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,166,116,0.70,0.02,0.01,0.00,0.00,0.00,0.70,1.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,9,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,11,0.97,1.00,0.00,0.00,0.08,0.07,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,RSTO,126,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,47,47,1.00,0.00,0.02,0.00,0.04,0.04,0.96,0.96,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,1053,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,31,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,14,0.93,1.00,0.00,0.00,0.93,0.13,0.00,14,15,1.00,0.00,0.07,0.13,1.00,0.93,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,179,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,8,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,1745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,55,0.00,0.00,0.00,0.00,1.00,0.00,0.09,72,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 14,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,226,209,0.92,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 1900,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,72,2,0.03,0.67,0.83,0.00,0.00,0.00,0.00,0.00,normal 31581,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,63,0.25,0.02,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3690,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,69,0.16,0.04,0.16,0.03,0.00,0.22,0.00,0.00,normal 0,tcp,http,SF,350,1183,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,14,1.00,1.00,0.00,0.00,0.39,0.08,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,25,1.00,1.00,0.00,0.00,0.31,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1525,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.65,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,9,0.25,0.22,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,209,1861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.07,0.00,0.00,1.00,0.00,0.14,108,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 2,tcp,finger,SF,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,4,0.02,1.00,0.02,0.50,0.00,0.00,0.90,0.00,anomaly 1,tcp,smtp,SF,681,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,32,181,0.28,0.09,0.03,0.01,0.03,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,58,0.01,0.03,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTO,257,0,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,142,255,1.00,0.00,0.01,0.03,0.00,0.00,0.01,0.01,normal 0,udp,domain_u,SF,45,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,63,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,214,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,171,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1551,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.25,0.00,0.75,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.23,0.00,0.77,1.00,anomaly 0,tcp,http,SF,241,245,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,33,0.00,0.00,0.00,0.00,1.00,0.00,0.15,148,254,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,13,1.00,1.00,0.00,0.00,0.50,0.08,0.00,186,56,0.28,0.02,0.01,0.04,1.00,0.95,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,22,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,109,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,223,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,96,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,7,193,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,282,2469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,385,361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,22,231,1.00,0.00,0.05,0.22,0.00,0.00,0.14,0.81,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,19,0.00,0.00,1.00,1.00,0.17,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,22,0.09,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,18,0.00,0.00,1.00,1.00,0.17,0.08,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,266,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,5200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,305,305,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,IRC,SF,87,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,19,0.70,0.11,0.04,0.00,0.00,0.00,0.56,0.79,normal 0,tcp,http,SF,235,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,1344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,14050,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,1,0.00,0.00,0.00,0.00,0.04,0.09,0.00,255,11,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,1433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,23,1.00,1.00,0.00,0.00,0.39,0.07,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,12,0.00,0.00,0.00,0.00,0.71,0.24,0.00,255,12,0.05,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1212,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,85,183,0.71,0.05,0.01,0.01,0.00,0.01,0.00,0.00,normal 5061,tcp,ftp_data,SF,5133876,0,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,41,1.00,0.00,1.00,0.07,0.00,0.02,0.00,0.00,anomaly 0,tcp,http,SF,282,3062,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,1378,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,1869,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.12,0.07,0.12,0.01,0.00,0.00,normal 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,28,0.16,0.01,0.16,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2137,328,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,177,0.81,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10835,tcp,telnet,SF,76,1188,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,8,0.73,0.36,0.09,0.00,0.09,0.12,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,20,0.00,0.00,0.00,0.00,0.83,0.08,0.00,255,25,0.10,0.71,0.34,0.00,0.05,0.00,0.61,0.00,anomaly 0,tcp,finger,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,8,0.04,0.12,0.04,0.25,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,16787,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,55,0.22,0.46,0.22,0.00,0.46,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,2,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,306,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1375,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,142,0.53,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,11836,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,541,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,7,1.00,1.00,0.00,0.00,0.11,0.10,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2087,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,158,0.70,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,4459,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2232,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,180,0.97,0.07,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,24,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 30,tcp,ftp,SF,1479,4145,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,31,0.13,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,273,3145,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,6669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,46,255,1.00,0.00,0.02,0.01,0.00,0.01,0.02,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,3,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3775,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,72,0.44,0.02,0.44,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,920,331,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,43,127,0.47,0.12,0.02,0.02,0.05,0.00,0.00,0.00,normal 0,tcp,http,SF,218,6329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1159,402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,28,0.11,0.06,0.00,0.00,0.73,0.00,0.01,0.00,normal 0,tcp,http,SF,216,1660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,139,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,33,70,1.00,0.00,0.03,0.09,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,246,266,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,0.11,3,241,1.00,0.00,0.33,0.18,0.00,0.00,0.67,0.59,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,23,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,40,1.00,0.00,1.00,0.10,0.00,0.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,113,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,222,660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,141,231,1.00,0.00,0.01,0.11,0.00,0.00,0.45,0.67,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,21,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.85,0.85,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.17,0.00,0.00,0.94,0.99,normal 0,tcp,http,SF,325,1817,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,14,0.05,0.02,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,1,0.05,0.00,0.00,0.00,0.05,0.41,0.00,174,1,0.01,0.07,0.32,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,7,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,110,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,242,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,2081,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,88,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,221,13125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,13,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,978,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,183,0.87,0.07,0.01,0.01,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1419,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,59,45,0.76,0.10,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,9981,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,0.06,1,142,1.00,0.00,1.00,0.20,0.00,0.00,0.00,0.65,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,11,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,12,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,12,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,247,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1247,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,20,1,0.05,0.15,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,152,0.60,0.03,0.60,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,13,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,212,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,6601,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,53,0.34,0.05,0.34,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S3,13,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.50,0.25,0.00,0.00,1.00,0.00,0.50,120,69,0.10,0.07,0.10,0.03,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,343,585,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,26,1.00,0.00,0.07,0.08,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,1898,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,21,142,0.76,0.10,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,24,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,326,326,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,22,0.09,0.18,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,482,482,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,108,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,290,863,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,248,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,480,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,11,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,27,2,0.07,0.11,0.04,0.00,0.04,0.50,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 38404,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 15,tcp,http,SF,293,128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,236,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,937,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 9,tcp,smtp,SF,848,342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,125,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,9,141,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,11,0.04,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,245,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,44,44,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,15,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,smtp,SF,204880,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,64,0.52,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,20,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,23,0.12,0.04,0.12,0.09,0.00,0.00,0.00,0.00,normal 12044,tcp,telnet,SF,2565,30547,0,0,0,0,0,1,2,0,0,0,5,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,17,0.07,0.06,0.00,0.00,0.66,0.06,0.01,0.12,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,39,4,0.10,0.18,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,362,362,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,1397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,84,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,273,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,206,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,14,1.00,1.00,0.00,0.00,0.33,0.09,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,38,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,71,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,289,10913,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,76,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,0.20,0.50,0.00,0.00,0.40,0.40,0.00,101,9,0.05,0.05,0.02,0.22,0.01,0.11,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,11,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,2702,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,76,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.13,0.00,0.00,1.00,0.89,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,170,1.00,0.00,0.11,0.21,0.00,0.00,1.00,0.99,normal 26,tcp,ftp,SF,320,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,47,0.21,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 560,tcp,telnet,SF,553,2413,0,0,0,0,0,1,12,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,32,0.15,0.03,0.00,0.00,0.00,0.03,0.01,0.06,normal 0,udp,domain_u,SF,45,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,230,209,0.91,0.01,0.00,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,343,5109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,308,2,0.00,0.00,1.00,1.00,0.01,0.50,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,1,37,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,47,0.18,0.02,0.18,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,295,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,934,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,31614,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,2943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,309,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 12,tcp,smtp,SF,926,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,36,0.58,0.04,0.02,0.06,0.00,0.00,0.00,0.00,normal 20,tcp,ftp,SF,242,774,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,50,0.20,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,1.00,0.33,0.00,0.00,1.00,0.00,1.00,23,135,0.04,0.09,0.04,0.01,0.91,0.01,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,1.00,1.00,0.00,0.00,1.00,0.00,1.00,1,5,1.00,0.00,1.00,1.00,1.00,1.00,0.00,0.00,normal 0,tcp,http,SF,312,6533,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,82,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,161,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,103,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2092,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,34,175,0.74,0.15,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,80,0.36,0.11,0.36,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,559,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,177,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 8835,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.68,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,274,12922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,32,1,0.03,1.00,0.03,0.00,0.00,0.00,0.97,1.00,anomaly 0,tcp,http,SF,281,8525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,12,255,1.00,0.00,0.08,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,223,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,38,0.15,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,744,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,24,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,35,51,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,15,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,120,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,186,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,20,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2652,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,241,0.95,0.01,0.00,0.01,0.00,0.00,0.00,0.00,normal 4,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,201,0.79,0.02,0.79,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,339,19790,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,62,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,139,56,0.19,0.03,0.19,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2570,373,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,125,0.26,0.06,0.02,0.02,0.00,0.00,0.00,0.00,normal 2540,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.62,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,9,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.15,0.00,0.00,1.00,0.86,normal 0,udp,domain_u,SF,42,121,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,89,0.00,0.00,0.00,0.00,1.00,0.00,0.02,123,92,0.75,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,11,0.00,0.00,1.00,1.00,0.10,0.07,0.00,188,11,0.06,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,12,0.00,0.00,1.00,1.00,0.04,0.05,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,11,251,1.00,0.00,0.09,0.17,0.00,0.00,1.00,0.98,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10,tcp,http,SF,266,2424,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,30973,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,3200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,2051,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,70,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,99,255,1.00,0.00,0.01,0.11,0.00,0.00,0.70,0.78,normal 0,tcp,http,SF,156,6139,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,17,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,2,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,158,4049,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,655,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,187,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,102,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,0.50,1.00,0.60,101,73,0.72,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,15,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,168,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,normal 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,2250,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,159,0.63,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,20669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,58,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,58,0.23,0.01,0.23,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,6,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,X11,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,1,0.00,0.00,0.44,1.00,0.11,1.00,0.00,164,1,0.01,0.09,0.01,0.00,0.01,0.00,0.02,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.21,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,214,9673,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,2354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.07,0.00,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,4,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,326,1691,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,1.00,1.00,0.00,0.00,0.25,0.75,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,58,204,1.00,0.00,0.02,0.01,0.00,0.00,1.00,1.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,186,0.73,0.02,0.73,0.00,0.00,0.00,0.02,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,200,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,15,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,149,74,0.23,0.02,0.23,0.03,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.65,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,237,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 3,tcp,smtp,S3,1765,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,49,162,0.78,0.12,0.02,0.01,0.02,0.02,0.00,0.00,normal 15,tcp,smtp,SF,848,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,168,0.67,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,937,373,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,67,240,0.88,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,24,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,950,479,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,37,0.15,0.02,0.00,0.00,0.00,0.00,0.83,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,9,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,352,3326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,85,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 5,tcp,telnet,SF,203,4267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,18,0.09,0.02,0.00,0.00,0.00,0.00,0.03,0.11,normal 1,tcp,smtp,SF,1295,375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,116,0.45,0.11,0.00,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,259,4567,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7321,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,64,0.06,0.03,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3245,399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,73,0.29,0.05,0.00,0.00,0.47,0.00,0.02,0.00,normal 0,tcp,smtp,SF,638,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,188,193,0.83,0.06,0.01,0.01,0.02,0.02,0.00,0.00,normal 0,tcp,smtp,SF,1188,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,137,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,19,1.00,1.00,0.00,0.00,0.13,0.04,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,90,27,0.30,0.06,0.30,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,881,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,142,0.50,0.50,0.25,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,4,255,1.00,0.00,0.25,0.15,0.00,0.00,1.00,0.78,normal 0,tcp,http,SF,210,1537,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,4136,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,190,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,382,526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,54,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.21,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,2280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,52,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,2,1.00,1.00,0.00,0.00,0.22,0.33,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,smtp,SF,1019,360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,152,0.48,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,115,0.45,0.18,0.45,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,21,152,1.00,0.00,0.05,0.12,0.00,0.00,1.00,0.86,normal 0,tcp,http,SF,221,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,50,0.00,0.00,0.00,0.00,1.00,0.00,0.10,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,187,14664,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,18,0.00,0.00,1.00,1.00,0.17,0.06,0.00,255,15,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,167,8159,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,85,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,13,1.00,0.92,0.00,0.08,1.00,0.00,0.15,12,12,1.00,0.00,0.08,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,48,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,92884,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,155,0.54,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,7,5,0.71,0.29,0.14,0.00,0.00,0.00,0.71,1.00,normal 0,tcp,http,SF,190,622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,2516,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,132,124,0.58,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1436,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,166,0.87,0.09,0.02,0.01,0.02,0.01,0.00,0.00,normal 0,tcp,http,SF,162,37895,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,289,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,10012,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,40,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,268,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,413,8801,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,11,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,666,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,43,56,0.79,0.07,0.02,0.04,0.00,0.00,0.00,0.00,normal 6,tcp,telnet,SF,105,2307,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,4,0.02,0.09,0.02,0.75,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,818,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 36918,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,331,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,20,1.00,1.00,0.00,0.00,0.25,0.05,0.00,160,40,0.25,0.03,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,12,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,105,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,3978,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,204,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,22,0.00,0.05,0.00,0.00,1.00,0.00,0.14,65,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,174,1581,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.07,0.00,normal 0,tcp,ftp_data,SF,1376,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,60,131,0.63,0.03,0.63,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.23,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,11,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,2006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,16,1.00,1.00,0.00,0.00,0.23,0.06,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,45,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,147,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,19,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,250,600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,6895,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,472,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 156,tcp,ftp,SF,950,2551,0,0,0,18,0,1,0,0,0,0,21,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,1,0.00,0.03,0.00,0.00,0.01,0.00,0.07,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,19,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,68,0.27,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,2,0.00,0.00,0.00,0.00,0.04,0.14,0.00,255,2,0.01,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,22,0.09,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,152,5476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,30,255,1.00,0.00,0.03,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,1830,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,205,39,0.19,0.02,0.19,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,146,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,4291,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,22,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,23,121,1.00,0.00,0.04,0.02,0.00,0.00,1.00,0.19,normal 0,tcp,http,SF,236,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,248,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.97,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,352,376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,292,23238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,241,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,189,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,10,1.00,1.00,0.00,0.00,0.33,0.07,0.00,72,14,0.14,0.06,0.06,0.14,0.97,0.71,0.00,0.00,anomaly 0,tcp,http,SF,229,472,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,20,0.08,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,8,1.00,1.00,0.00,0.00,0.40,0.30,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,1600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 6,tcp,ftp,RSTO,0,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,2,0.50,1.00,0.50,1.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,12,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,310,0.00,0.00,0.00,0.00,1.00,0.01,0.01,235,196,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,175,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 3106,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.53,0.74,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,7,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,15,1.00,1.00,0.00,0.00,0.30,0.12,0.00,255,15,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,189,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,38,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,148,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 31829,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,12,1.00,1.00,0.00,0.00,0.06,0.05,0.00,131,12,0.09,0.08,0.01,0.00,0.89,1.00,0.01,0.00,anomaly 0,tcp,smtp,SF,1688,410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,71,0.28,0.05,0.00,0.00,0.45,0.00,0.02,0.00,normal 0,tcp,http,SF,218,904,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,1.00,1.00,0.00,0.00,1.00,0.00,0.00,107,127,0.42,0.02,0.01,0.02,0.98,0.35,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,12,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,173,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.51,0.44,0.00,0.08,0.00,0.45,1.00,anomaly 0,tcp,http,SF,232,9533,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,20,1.00,1.00,0.00,0.00,0.36,0.05,0.00,255,20,0.08,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,201,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,15,0.43,0.09,0.43,0.13,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,33,255,1.00,0.00,0.03,0.18,0.00,0.00,1.00,1.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,5,1.00,1.00,0.00,0.00,0.50,0.20,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,15,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,200,48,0.15,0.03,0.15,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,16123,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,2676,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,auth,SF,10,37,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,2,0.08,0.15,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,790,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,86,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 4965,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.62,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1139,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,65,0.25,0.02,0.02,0.00,0.95,0.94,0.00,0.00,normal 3,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,1,0.04,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,0.90,0.00,0.00,0.04,0.00,0.83,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,86,63,0.27,0.06,0.27,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 31,tcp,telnet,SF,119,6449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.03,0.00,0.00,0.00,0.00,0.00,0.33,normal 0,udp,domain_u,SF,42,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,132,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,613,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,161,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,68,0.21,0.02,0.21,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,16,1.00,1.00,0.00,0.00,0.29,0.07,0.00,255,58,0.23,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 17784,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,164,30881,0,0,0,1,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,27,0.79,0.00,0.00,0.00,0.21,0.06,0.00,255,27,0.11,0.90,0.11,0.00,0.09,0.00,0.81,0.00,anomaly 0,udp,domain_u,SF,46,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,40,0.56,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 20,tcp,ftp,SF,233,766,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,23,0.16,0.49,0.01,0.00,0.00,0.00,0.45,0.04,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,10,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,222,0.87,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,16787,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,44,0.33,0.04,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,577,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,3749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,41,38,0.93,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 1198,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.39,0.86,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,937,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.33,0.67,1.00,255,134,0.53,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,313,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,1246,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.04,0.00,0.01,0.03,0.01,normal 0,tcp,http,SF,165,4475,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,205,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,54,20,0.37,0.11,0.02,0.00,0.96,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,3862,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,12,0.00,0.00,0.00,0.00,1.00,0.00,0.42,13,255,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,4530,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,48,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,2942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,88,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,15,1.00,0.00,0.07,0.00,0.00,0.00,0.07,0.07,anomaly 0,tcp,http,SF,325,717,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,234,1212,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,84,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,307,306,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,14,1.00,0.00,1.00,0.57,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,42,1.00,0.00,1.00,0.17,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,216,384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,19,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 771,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,85,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,85,0.33,0.02,0.33,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,210,2769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,22,0.00,0.00,0.00,0.00,1.00,0.00,0.23,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5013,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,43,0.13,0.02,0.13,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,26408,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,17,0.07,0.78,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.75,0.75,1.00,0.00,0.00,55,251,1.00,0.00,0.02,0.17,0.00,0.00,0.91,0.98,normal 0,tcp,http,SF,337,1173,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.16,0.00,0.00,0.36,0.85,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,28,0.00,0.00,0.00,0.00,0.90,0.06,0.00,255,28,0.11,0.25,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 22,udp,domain_u,SF,44,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,43,1.00,0.00,0.50,0.35,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,13,1.00,1.00,0.00,0.00,0.12,0.08,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,319,177,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,13,0.00,0.00,0.00,0.15,1.00,0.00,0.23,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,86,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,237,1,0.00,0.07,0.04,0.00,0.00,0.00,0.05,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,16,1.00,1.00,0.00,0.00,0.21,0.08,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,31,15,0.48,0.19,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,350,13336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,2353,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,148,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,464,10,0.07,0.00,0.90,1.00,0.02,0.98,0.00,255,9,0.04,0.97,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,86,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,86,0.34,0.02,0.34,0.00,0.00,0.00,0.00,0.00,anomaly 842,tcp,telnet,SF,691,24668,0,0,0,0,0,1,4,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,99,0.39,0.01,0.00,0.00,0.63,0.81,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,17,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,24,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,215,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,20,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,2,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,2,0.01,0.26,0.76,0.00,0.00,0.00,0.21,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,153,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,68,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,315,314,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,15,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,1448,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,54,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,118,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,261,834,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,23,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,1322,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,54,0.76,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,5200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,206,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,947,323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,109,0.49,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,32099,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,255,1.00,0.00,0.01,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,X11,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.33,0.00,0.00,0.00,0.00,0.11,1.00,anomaly 0,tcp,http,SF,190,23086,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.08,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,18,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,749,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,125,0.49,0.02,0.49,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,929,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.03,0.00,0.01,0.00,0.01,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,43,0.84,0.04,0.84,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,17,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,17,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,329,2969,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,3325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,41,149,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,135,0.00,0.00,0.00,0.00,0.98,0.03,0.01,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,22,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.11,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.85,1.00,anomaly 0,tcp,http,SF,323,3581,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,5,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,203,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,63,0.56,0.08,0.56,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,164,4559,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,10,255,1.00,0.00,0.10,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,18,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,13,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,3125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,7,674,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,2,0.04,0.08,0.04,1.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,20,1.00,1.00,0.00,0.00,0.26,0.05,0.00,255,69,0.27,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,353,418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,102,255,1.00,0.00,0.01,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,279,1928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,223,740,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,41,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1903,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,10,10,1.00,0.00,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,203,199,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,15,1.00,1.00,0.00,0.00,0.18,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,17,0.00,0.00,1.00,1.00,0.19,0.07,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,696,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,170,178,0.74,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,18,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,344,5378,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,69,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,2669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,154,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,442,442,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,39431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,256,3112,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,1253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.07,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2489,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,160,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,13345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,6,255,1.00,0.00,0.17,0.07,0.00,0.00,0.00,0.00,normal 19,tcp,smtp,SF,726,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,200,178,0.69,0.08,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,17,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,72,0.28,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,255,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1014,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,46,0.41,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,3334,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,108,200,0.70,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 57,tcp,telnet,SF,136,16044,0,0,0,0,0,1,4,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,1,0.01,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,2531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,46,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,89,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,89,0.35,0.04,0.35,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.69,0.69,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.01,0.00,0.00,0.69,0.06,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.50,0.00,0.50,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.05,0.00,0.95,1.00,anomaly 0,udp,domain_u,SF,43,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,161,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,218,0.85,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 13308,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.05,0.00,0.94,1.00,0.00,0.96,0.00,255,1,0.00,0.91,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,udp,domain_u,SF,112,41,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,249,0.00,0.00,0.00,0.00,1.00,0.01,0.00,139,106,0.76,0.01,0.23,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,267,666,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,137,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,1018,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,240,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,127,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,6,6,1.00,0.00,0.17,0.00,0.00,0.00,0.17,0.17,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,19,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,22,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,1024,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,18,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.02,0.00,0.00,0.00,0.00,0.03,0.03,normal 666,tcp,telnet,SF,634,20143,0,0,0,0,0,1,3,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,109,0.49,0.01,0.00,0.00,0.90,0.92,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,154,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.17,0.00,0.00,1.00,1.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,20,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,333,860,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,255,1.00,0.00,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,287,2537,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,7384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,163,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,22,0.80,0.40,0.80,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,16,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1509,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,156,0.73,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,11,1.00,1.00,0.00,0.00,0.39,0.14,0.00,255,67,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,1440,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,35,0.00,0.00,0.00,0.00,1.00,0.00,0.09,33,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,33,0.13,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,8,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,64,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,6,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.62,0.00,0.00,0.00,0.00,0.58,1.00,anomaly 0,tcp,http,SF,352,1564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,137,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,190,0.75,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,355,1488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,1,0.11,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.12,0.00,0.87,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,6,1.00,1.00,0.00,0.00,0.55,0.27,0.00,255,6,0.02,0.10,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,15,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,211,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,9,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,5,255,1.00,0.00,0.20,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,184,5515,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,17,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 37498,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,58,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.67,0.67,1.00,0.00,0.00,12,165,1.00,0.00,0.08,0.23,0.00,0.00,0.75,0.98,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,1,1.00,1.00,0.00,0.00,0.06,0.31,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,248,2175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,6396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,13,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,3884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.95,0.95,0.00,0.00,0.00,0.94,1.00,anomaly 0,tcp,http,SF,308,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,2531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,148,148,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,4039,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,5,2,0.40,0.60,0.20,0.00,0.60,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,5137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,255,1.00,0.00,0.01,0.02,0.00,0.00,0.15,0.35,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,43,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 2,tcp,smtp,SF,2103,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,142,0.52,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,1,0.10,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,12,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,3755,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,159,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,1,0.09,0.00,0.91,1.00,0.01,1.00,0.00,255,1,0.00,0.57,0.00,0.00,0.03,0.00,0.28,1.00,anomaly 0,udp,domain_u,SF,45,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,253,0.00,0.00,0.00,0.00,0.99,0.01,0.01,178,139,0.78,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1491,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,55,0.23,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,336,4126,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,50,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,7,1.00,1.00,0.00,0.00,0.11,0.08,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2230,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.85,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,4903,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,6979,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.02,0.02,0.00,0.12,0.09,normal 0,tcp,http,SF,241,389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1139,375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,246,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.02,0.05,0.00,0.00,0.00,0.79,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,4,151,1.00,0.00,1.00,0.06,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,90,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,http,SF,302,258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,12139,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,44,0.00,0.00,0.00,0.00,1.00,0.00,0.14,19,255,1.00,0.00,0.05,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,2971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.05,0.04,0.01,0.00,0.00,normal 0,tcp,smtp,SF,1573,329,0,0,0,0,0,1,0,0,0,0,0,0,2,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,157,0.88,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,240,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,2,0.00,0.00,0.00,0.00,0.09,0.36,0.00,255,2,0.01,0.25,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,201,1570,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,85,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,4,0.00,0.00,0.00,0.00,0.20,0.15,0.00,255,23,0.09,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1458,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,194,0.77,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,15,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,19,0.97,1.00,0.03,0.00,0.28,0.09,0.00,255,35,0.14,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1562,399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,185,0.73,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,11,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,8545,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,25,1.00,1.00,0.00,0.00,0.09,0.04,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9,tcp,smtp,SF,744,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,98,0.57,0.05,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,1694,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,167,657,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,159,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,607,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,74,0.70,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,19,0.99,1.00,0.00,0.00,0.17,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,151,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,340,414,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,103,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.02,normal 0,tcp,http,SF,263,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,6,1.00,1.00,0.00,0.00,0.26,0.17,0.00,255,27,0.11,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,14,1.00,1.00,0.00,0.00,0.23,0.10,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,19,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.15,0.00,0.00,0.96,1.00,normal 0,udp,domain_u,SF,43,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,295,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,35,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,225,28,0.12,0.03,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,359,2118,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,35,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,248,164,0.66,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,9,1.00,1.00,0.00,0.00,0.36,0.16,0.00,255,67,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,187,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,98,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,58,0.38,0.05,0.38,0.00,0.01,0.00,0.41,0.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,1656,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,279,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,6,1.00,1.00,0.00,0.00,0.16,0.11,0.00,255,65,0.25,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.05,0.18,0.00,0.04,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,7355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,197,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,1541,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,5,1.00,1.00,0.00,0.00,0.38,0.38,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,15,0.06,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,3,0.00,0.00,0.99,1.00,0.03,0.08,0.00,255,3,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,278,1564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,231,0.91,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,14,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 36429,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,337,1173,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.50,0.25,0.00,0.00,1.00,0.00,0.75,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,28,0.11,0.01,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.75,0.00,255,1,0.00,0.65,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,403,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,55,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,16,1.00,1.00,0.00,0.00,0.46,0.14,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S2,244,27498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,148,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,180,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,199,1.00,0.00,0.25,0.18,0.00,0.00,1.00,0.56,normal 0,tcp,http,SF,254,1408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,357,1266,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,82,0.32,0.13,0.32,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,11,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,5,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,231,0.91,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1629,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,103,195,0.69,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,32,0.78,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,15,1.00,1.00,0.00,0.00,0.45,0.09,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,374,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,88,0.92,0.17,0.92,0.02,0.00,0.00,0.00,0.00,normal 9535,tcp,IRC,RSTO,1441,5626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,87,1,0.01,0.02,0.01,0.00,0.00,0.00,0.01,1.00,normal 0,tcp,ftp_data,SF,637,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,78,0.41,0.02,0.41,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1809,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,181,196,0.77,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,4315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,21,30,1.00,0.00,0.05,0.17,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S2,236,0,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.33,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,252,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,14,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,X11,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,2,0.33,1.00,0.67,0.00,0.00,1.00,0.00,255,2,0.01,1.00,0.00,0.00,0.16,1.00,0.84,0.00,anomaly 0,tcp,http,SF,304,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,73,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,73,0.29,0.04,0.29,0.00,0.02,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,233,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,2327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,53,231,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,852,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,197,0.77,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,1417,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,1189,390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,95,0.37,0.25,0.00,0.00,0.25,0.00,0.00,0.00,normal 0,icmp,red_i,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,1,0.01,0.02,0.01,0.00,0.00,0.00,0.11,0.00,normal 0,tcp,http,SF,274,1836,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1278,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.72,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,30739,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.25,0.00,0.00,1.00,0.00,0.50,155,255,1.00,0.00,0.01,0.03,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,297,2120,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,18,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,203,23239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,6839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,34,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 22,tcp,ftp,SF,329,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,48,0.48,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10261,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,14,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,178,1553,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,253,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,193,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,13,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,54,0.21,0.16,0.21,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,154,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,2,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,118,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,118,0.46,0.02,0.46,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,965,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,34,0.05,0.03,0.00,0.00,1.00,0.00,0.06,255,88,0.35,0.03,0.35,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,260,190,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,121,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,2701,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,20,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,17,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,3091,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.08,0.00,0.91,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 1,tcp,smtp,SF,854,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,213,0.89,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,2335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,34,1.00,0.00,0.03,0.00,0.00,0.00,0.32,0.32,anomaly 0,tcp,http,SF,306,1185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,103,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,213,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,96,0.31,0.03,0.31,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,113,9,0.08,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,2077,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,119,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,169,0.66,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,12,1.00,1.00,0.00,0.00,0.24,0.08,0.00,255,52,0.20,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.05,0.04,0.00,0.00,0.00,0.04,1.00,anomaly 0,tcp,http,SF,219,12044,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1871,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,111,0.73,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.13,0.00,0.00,1.00,0.92,normal 0,udp,domain_u,SF,45,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,246,0.00,0.00,0.00,0.00,0.99,0.01,0.01,171,132,0.77,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,287,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,13,1.00,1.00,0.00,0.00,0.24,0.07,0.00,255,48,0.19,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,X11,SF,248,376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,2,0.02,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,1511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,40,0.00,0.00,0.00,0.00,1.00,0.00,0.08,19,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,233,1481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,6251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,28,0.00,0.00,0.00,0.00,1.00,0.00,0.18,113,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,228,804,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,6,0.71,0.83,0.29,0.17,0.71,0.43,0.33,255,46,0.18,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,233,4296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,17,0.07,0.05,0.07,0.00,0.35,0.00,0.02,0.00,anomaly 10103,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.34,0.00,0.00,0.00,0.00,0.10,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,74,0.29,0.13,0.92,0.00,0.00,0.00,0.08,0.00,anomaly 1,tcp,smtp,SF,675,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,23,124,0.57,0.17,0.04,0.02,0.00,0.02,0.00,0.00,normal 0,tcp,smtp,SF,751,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,197,0.79,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,217,0.85,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,179,14496,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2671,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,169,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,979,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.64,0.00,0.00,0.00,0.07,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,12,1.00,1.00,0.00,0.00,0.24,0.08,0.00,255,47,0.18,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,20,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,20,1.00,1.00,0.00,0.00,0.21,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,20,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,676,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,43,0.00,0.00,0.00,0.00,1.00,0.00,0.05,71,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,20,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,1046,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,10,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,9,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,18,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,305,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3909,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,113,0.39,0.05,0.39,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,49,0.26,0.03,0.26,0.00,0.02,0.00,0.09,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.23,0.00,0.77,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.26,0.00,0.74,1.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,25,0.17,0.03,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3909,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,43,0.60,0.13,0.60,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,12,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,16,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,3185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,31,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 30,tcp,ftp,SF,1060,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,64,0.27,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,16,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,597,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,30,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,3437,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 56,tcp,http,SF,237,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,255,1.00,0.00,0.01,0.07,0.00,0.00,0.03,0.02,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,110,102,0.93,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,8,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,946,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,161,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,5,0.00,0.00,1.00,1.00,0.04,0.09,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,24,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,960,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,34,0.00,0.00,0.00,0.00,1.00,0.00,0.18,224,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,24,2,0.04,1.00,0.04,1.00,0.00,0.00,0.83,1.00,anomaly 16965,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.69,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 4,tcp,smtp,SF,17086,340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,190,0.60,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,238,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,14,1.00,1.00,0.00,0.00,0.23,0.07,0.00,255,34,0.13,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,8422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,364,55328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,212,1385,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,35,0.00,0.00,0.00,0.00,1.00,0.00,0.17,72,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,208,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,5,0.71,0.43,0.71,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,277,1925,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,90,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,181,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,15,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,922,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,162,155,0.73,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1153,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,27,0.12,0.08,0.12,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,11,43,1.00,0.00,0.09,0.37,0.00,0.00,1.00,1.00,normal 30217,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.64,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,domain,SF,48,487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,69,1,0.00,0.00,0.00,0.00,0.01,0.03,0.00,255,1,0.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,1,0.01,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.44,0.00,0.00,0.00,0.00,0.40,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,17,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,2649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,205,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,223,0.87,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,248,3200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,21,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,439,439,0.00,0.00,0.00,0.00,1.00,0.00,0.00,232,232,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,98,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,216,622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,819,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,21,0.08,0.64,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,4,1.00,1.00,0.00,0.00,0.40,0.40,0.00,172,44,0.26,0.02,0.02,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,187,1,0.01,0.74,0.74,0.00,0.03,0.00,0.63,1.00,anomaly 1,tcp,smtp,SF,834,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,139,150,0.76,0.05,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,6992,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,20,0.08,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,248,10403,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,21,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,5319,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,53,0.28,0.02,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.00,0.00,0.03,0.03,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,508,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,68,255,1.00,0.00,0.01,0.03,0.00,0.01,0.01,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,373,1,0.06,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,udp,domain_u,SF,134,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,254,0.00,0.00,0.00,0.00,1.00,0.01,0.00,144,111,0.77,0.01,0.26,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,504,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,87,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,17,1.00,1.00,0.00,0.00,0.38,0.09,0.00,255,57,0.22,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,166,276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,72,0.18,0.71,0.01,0.03,0.00,0.00,0.66,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,3,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,3,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1525,400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,217,118,0.54,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,6,1.00,1.00,0.00,0.00,0.50,0.25,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,337,1173,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,218,255,1.00,0.00,0.00,0.01,0.00,0.01,0.15,0.13,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,36,1.00,0.00,1.00,0.17,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,203,454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,25,0.00,0.00,0.00,0.04,1.00,0.00,0.08,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.01,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,14,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,294,6264,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,16,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,SF,8,173,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,6,0.04,0.03,0.01,0.50,0.00,0.17,0.00,0.00,normal 0,tcp,http,SF,312,1195,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,153,0.00,0.00,0.00,0.00,0.99,0.01,0.02,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,142,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,7,251,1.00,0.00,0.14,0.05,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,230,1587,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,26,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,20,0.00,0.00,1.00,1.00,0.14,0.05,0.00,223,20,0.09,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,6,0.00,0.00,0.00,0.00,0.67,0.22,0.00,255,6,0.02,0.96,0.05,0.00,0.03,0.00,0.93,0.00,anomaly 0,tcp,http,SF,299,12471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,10,228,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,121,7,0.02,0.03,0.01,0.29,0.00,0.00,0.01,0.00,normal 0,tcp,ftp_data,SF,6062,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,45,0.28,0.02,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,191,38,0.14,0.02,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,4631,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,11,1.00,1.00,0.00,0.00,0.20,0.07,0.00,255,70,0.27,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,220,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,10,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_3,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,208,1,0.00,0.53,0.53,0.00,0.00,0.00,0.52,1.00,anomaly 0,tcp,http,SF,314,2387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,139,255,1.00,0.00,0.01,0.05,0.01,0.01,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,248,35,0.14,0.66,0.14,0.00,0.02,0.00,0.53,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,13,1.00,1.00,0.00,0.00,0.06,0.05,0.00,26,13,0.50,0.12,0.04,0.00,0.92,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,5,0.00,0.00,0.00,0.00,0.26,0.26,0.00,255,43,0.17,0.46,0.69,0.00,0.00,0.00,0.31,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,18,1.00,0.00,1.00,0.22,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,63,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.33,0.00,0.67,0.67,0.00,25,61,0.36,0.16,0.04,0.03,0.00,0.00,0.08,0.00,normal 9725,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.90,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,204,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,2828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,35,0.00,0.00,0.00,0.00,1.00,0.00,0.09,116,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,250,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,16,0.97,1.00,0.03,0.00,0.22,0.08,0.00,255,36,0.14,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,19,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,3,1.00,1.00,0.00,0.00,0.43,0.57,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,113,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1165,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,40,0.92,0.17,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,normal 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,155,47,0.15,0.03,0.15,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,19,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1195,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.25,0.00,0.00,0.00,0.50,0.50,0.00,255,4,0.02,0.53,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,276,6773,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,45,255,1.00,0.00,0.02,0.03,0.00,0.02,0.00,0.02,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,3,1.00,1.00,0.00,0.00,0.06,0.12,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3909,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,53,0.50,0.03,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,36,0.00,0.00,0.00,0.00,1.00,0.00,0.11,187,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,717,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,162,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,219,0.86,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,2275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,58,62,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,10203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,20,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,137,5,0.04,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,1077,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,20,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.27,0.26,0.00,0.00,0.00,0.26,1.00,anomaly 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,20,27,0.20,0.15,0.20,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.07,0.01,0.00,0.93,0.00,0.00,0.00,normal 0,tcp,http,SF,300,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,213,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,20,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,175,0.69,0.16,0.69,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,281,4768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.01,normal 0,tcp,smtp,SF,1346,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,57,0.69,0.06,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,41,1,0.02,0.10,0.02,0.00,0.95,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,94,53,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,24,0.67,0.08,0.56,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,1,0.00,0.00,0.00,0.00,0.06,0.18,0.00,255,1,0.00,0.84,0.18,0.00,0.03,0.00,0.79,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,275,31039,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.20,0.00,0.00,1.00,0.00,0.40,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,248,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,226,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,225,309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,23,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,5,1.00,1.00,0.00,0.00,0.10,0.12,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,157,38299,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,5,0.02,0.06,0.00,0.00,0.53,0.00,0.05,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,255,31700,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,26,0.00,0.00,0.00,0.00,1.00,0.00,0.12,200,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,993,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,31,0.03,0.03,0.00,0.03,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,275,316,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,140,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,766,286,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,145,1.00,0.00,1.00,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,11,1.00,1.00,0.00,0.00,0.10,0.08,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,436,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,837,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,132,0.38,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,15,1.00,1.00,0.00,0.00,0.25,0.07,0.00,255,56,0.22,0.03,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,960,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,60,0.47,0.08,0.47,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,19,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,10,1.00,1.00,0.00,0.00,0.21,0.13,0.00,255,19,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,5,1.00,0.00,1.00,0.40,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,17,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,4,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,335,8275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.04,0.02,0.00,0.00,0.00,normal 7999,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,988,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.23,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,13,1.00,1.00,0.00,0.00,0.12,0.05,0.00,168,13,0.08,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,1203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,27,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5300,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.57,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,1,0.02,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.74,0.00,0.00,0.01,0.00,0.69,1.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,118,0.46,0.01,0.58,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,341,250,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,154,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,105,0.41,0.02,0.41,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1917,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,66,63,0.95,0.03,0.02,0.00,0.00,0.00,0.00,0.00,normal 2,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,2117,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,345,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,38,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,60,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,tim_i,SF,564,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 21,tcp,ftp,SF,89,345,0,0,0,1,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 6,tcp,smtp,SF,3077,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,224,172,0.64,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 15,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,10,1.00,0.00,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,1299,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,494,1,0.08,0.00,0.89,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,supdup,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.38,0.74,0.00,0.00,0.00,0.74,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.22,0.00,0.78,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.23,0.00,0.77,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.27,0.54,0.00,0.00,0.00,0.54,1.00,anomaly 0,tcp,http,SF,216,6329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,8,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,55,0.22,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 159,tcp,http,SF,205,308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.29,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,1875,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,18,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,18,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,398,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1001,276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,50,189,0.86,0.06,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,1538,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,240,53,0.22,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,7203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,678,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,95,0.37,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,751,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,107,0.50,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1363,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,69,0.43,0.03,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,1085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,18,1.00,1.00,0.00,0.00,0.29,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 58,tcp,smtp,SF,2672,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,123,145,0.65,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 63,tcp,http,SF,237,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,79,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 25,tcp,ftp,SF,287,903,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,56,0.22,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,116,0.45,0.01,0.45,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,285,9998,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.91,0.90,0.00,0.00,0.00,0.90,1.00,anomaly 0,tcp,http,SF,211,24786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,520,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,17,0.97,1.00,0.03,0.00,0.24,0.09,0.00,255,47,0.18,0.04,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,90,0.97,0.06,0.97,0.33,0.00,0.00,0.00,0.00,normal 0,icmp,urh_i,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,10,0.14,0.07,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,2676,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,94,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 21,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,354,449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,16,0.00,0.00,0.00,0.00,1.00,0.00,0.31,31,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 1,tcp,finger,SF,9,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,248,15,0.06,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,933,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,81,255,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,private,S1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,1.00,1.00,0.00,0.00,normal 0,tcp,smtp,SF,896,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,168,0.62,0.11,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,19,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,190,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,1123,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,44,32,0.73,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,196,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,69,255,1.00,0.00,0.01,0.04,0.00,0.01,0.01,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.10,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,3119,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,3734,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,369,14721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,194,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,166,2308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,50,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,1109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,8513,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,348,277,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,255,1.00,0.00,0.01,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,8932,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,8163,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,128,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,6,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 3924,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.78,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,5,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,195,319,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,6,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,120,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,5103,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,95,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,15,1.00,1.00,0.00,0.00,0.28,0.08,0.00,255,59,0.23,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,5,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,249,1.00,0.00,1.00,0.06,0.00,0.00,1.00,0.95,normal 0,tcp,http,SF,284,292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 10,tcp,http,SF,243,191,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.76,0.76,0.00,0.00,0.00,0.75,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,5,1.00,1.00,0.00,0.00,0.19,0.15,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,3390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,40,0.00,0.00,0.00,0.00,1.00,0.00,0.10,33,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,9,0.00,0.00,0.00,0.00,0.06,0.04,0.00,255,9,0.04,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,14,0.05,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,95,0.37,0.10,0.37,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,2,0.00,0.00,1.00,1.00,0.02,0.08,0.00,79,2,0.03,0.10,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,375,375,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,148,292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.33,0.01,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,299,1792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,31,0.00,0.00,0.00,0.00,1.00,0.00,0.13,84,255,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,389,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,smtp,SF,746,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,143,0.56,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,34,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,3,0.00,0.00,0.00,0.00,0.25,0.17,0.00,255,9,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12,tcp,ftp_data,SF,7045,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,46,1.00,0.00,1.00,0.04,0.00,0.02,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,30,0.16,0.07,0.16,0.07,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1084,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,132,0.52,0.05,0.00,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.26,0.19,0.00,0.33,0.00,0.20,1.00,anomaly 0,udp,domain_u,SF,44,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,1925,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,1342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,64,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 21767,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,4219,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,361,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,268,970,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,177,5159,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,84,0.96,0.08,0.96,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,3,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,244,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,20,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,298,8774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,41,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,23,29,1.00,0.00,0.04,0.14,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,46,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,87,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,96,0.38,0.02,0.38,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,18,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 31,tcp,ftp,SF,1453,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,192,50,0.26,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.00,0.00,0.00,1.00,0.00,0.00,0.00,239,201,0.84,0.01,0.00,0.00,0.00,0.00,0.84,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,10,1.00,1.00,0.00,0.00,0.22,0.09,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,1171,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1018,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,170,161,0.68,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,329,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,6,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,10,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,5,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,203,15,0.05,0.03,0.05,0.13,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1292,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,53,183,0.92,0.04,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,83,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,118,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,111,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,6593,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,41,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,183,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,101,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,101,0.40,0.02,0.40,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,115,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,175,0.69,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,103,97,0.94,0.03,0.01,0.00,0.00,0.00,0.94,1.00,normal 0,tcp,http,SF,240,422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,124,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,18,0.00,0.00,0.00,0.00,1.00,0.00,0.28,68,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,39,1.00,0.00,0.03,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,62,70,1.00,0.00,0.03,0.03,0.03,0.03,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,257,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,173,11889,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,136,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,237,1.00,0.00,0.25,0.21,0.00,0.00,1.00,0.76,normal 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,963,325,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,162,0.67,0.03,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,9,0.90,1.00,0.00,0.00,0.90,0.20,0.00,9,10,1.00,0.00,0.11,0.20,1.00,0.90,0.00,0.00,anomaly 0,tcp,http,SF,229,1402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,33,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,117,215,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,21,21,1.00,0.00,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3909,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,91,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10073,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,69,0.33,0.03,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,749,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,72,0.28,0.03,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,18,1.00,1.00,0.00,0.00,0.19,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1035,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,161,120,0.53,0.04,0.01,0.02,0.01,0.01,0.01,0.00,normal 24,tcp,ftp,SF,243,775,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,7,0.04,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,20,1.00,1.00,0.00,0.00,0.50,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,159,255,1.00,0.00,0.01,0.04,0.00,0.00,0.67,0.62,normal 0,tcp,http,SF,364,471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,32,0.03,0.08,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,9,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,3248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,233,0.97,0.01,0.00,0.00,0.00,0.00,0.06,0.06,normal 0,tcp,http,SF,356,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,6,0.95,1.00,0.05,0.00,0.29,0.24,0.00,255,25,0.10,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,304,11472,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,1664,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.05,0.00,0.00,0.33,0.47,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,1,0.00,0.00,1.00,1.00,0.02,0.56,0.00,215,1,0.00,0.12,0.21,0.00,0.01,0.00,0.44,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,20,1.00,0.00,1.00,0.55,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,216,588,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,238,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,15876,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,47,0.53,0.03,0.53,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,14,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,mtp,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,3,0.74,0.67,0.26,0.33,0.02,0.36,0.00,255,3,0.01,0.17,0.47,0.00,0.35,0.67,0.13,0.33,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,8,254,1.00,0.00,0.12,0.10,0.00,0.00,1.00,1.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,17,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,17,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 25,tcp,ftp,SF,350,1072,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.02,0.01,0.00,0.00,0.00,0.03,0.10,normal 0,tcp,http,SF,235,1423,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,9963,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,43,0.00,0.00,0.00,0.00,1.00,0.00,0.14,45,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 10,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,23,0.38,0.05,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,12,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.08,0.00,0.00,1.00,0.99,normal 0,tcp,other,SF,3468,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,1,0.05,0.00,0.00,0.00,0.05,0.32,0.00,144,1,0.01,0.08,0.35,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,266,1715,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,79,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,79,0.31,0.01,0.31,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1661,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,218,187,0.73,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,56,0.00,0.00,0.02,0.00,0.98,0.04,0.00,255,56,0.22,0.02,0.22,0.00,0.00,0.00,0.59,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,245,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.96,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,330,4509,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,62,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,162,0.64,0.37,0.64,0.00,0.09,0.00,0.28,0.00,anomaly 0,tcp,http,SF,318,295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.01,normal 5,tcp,smtp,SF,775,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,168,175,0.62,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,232,0.91,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,5,0.00,0.00,1.00,1.00,0.06,0.09,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,5336,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,48,0.19,0.02,0.19,0.00,0.00,0.00,0.71,0.00,normal 22,tcp,ftp,SF,239,769,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,42,0.27,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,162,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,47,0.00,0.00,0.00,0.00,0.64,0.05,0.00,255,111,0.44,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,159,29269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,86,122,1.00,0.00,0.01,0.07,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,215,1469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,9,141,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,245,7,0.02,0.01,0.00,0.29,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,232,19,0.08,0.70,0.08,0.00,0.03,0.00,0.57,0.00,anomaly 0,tcp,smtp,SF,626,390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,214,0.89,0.07,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,3,1.00,1.00,0.00,0.00,0.23,0.31,0.00,255,32,0.13,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,8,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,9324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,13,23,1.00,0.00,0.08,0.17,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7940,0,0,0,0,0,0,1,0,0,0,0,2,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,53,0.25,0.02,0.25,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.86,1.00,0.14,1.00,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,0.03,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.04,0.00,0.96,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.93,1.00,anomaly 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,1,0.11,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.89,1.00,anomaly 0,tcp,http,SF,221,4213,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4420,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,92,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,133,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,994,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,155,0.61,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,5444,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,45,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.64,0.18,0.00,0.01,0.00,0.52,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,15,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,2943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,18,1.00,0.00,0.07,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,124,255,1.00,0.00,0.01,0.08,0.00,0.00,1.00,0.97,normal 3,tcp,smtp,SF,911,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,156,0.61,0.06,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,142,0.56,0.02,0.56,0.00,0.01,0.00,0.02,0.00,anomaly 0,tcp,rje,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.31,0.60,0.00,0.00,0.00,0.60,1.00,anomaly 0,tcp,http,S1,241,10669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,1.00,0.01,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,18,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,65,1.00,0.00,1.00,0.31,0.00,0.00,1.00,1.00,normal 2,tcp,smtp,SF,1131,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,177,242,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,4096,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8496,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,10,0.62,0.19,0.62,0.00,0.06,0.10,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,9,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,25,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,10,0.00,0.00,1.00,1.00,0.12,0.08,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,286,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,103,255,1.00,0.00,0.01,0.13,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1384,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,54,0.66,0.06,0.01,0.00,0.01,0.02,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,161,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.60,0.60,1.00,0.00,0.00,25,105,1.00,0.00,0.04,0.19,0.00,0.00,0.84,0.96,normal 0,tcp,http,SF,247,1638,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,17,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,7,0.00,0.00,1.00,1.00,0.05,0.08,0.00,255,7,0.03,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,90,0.59,0.03,0.59,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,14052,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,224,139,0.58,0.02,0.58,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,18,0.00,0.00,1.00,1.00,0.14,0.07,0.00,250,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 19,udp,domain_u,SF,95,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,11,0.50,0.09,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S1,91,2832,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,158,31,0.20,0.45,0.01,0.00,0.09,0.48,0.42,0.03,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,241,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,198,2406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,0.09,127,255,1.00,0.00,0.01,0.03,0.00,0.01,0.01,0.00,normal 0,tcp,http,SF,341,1164,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1520,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,158,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1855,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,69,186,0.81,0.04,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,95,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,223,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 10340,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.79,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,12,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,57,1.00,0.00,0.02,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,17,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,8,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,28,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,7,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,4374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27241,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,201,5308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,134,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,1576,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 136,tcp,http,SF,322,270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.63,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 25,tcp,nnsp,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,779,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,217,170,0.64,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,1037,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,254,1529,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,156,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,13,0.05,0.01,0.05,0.00,0.84,0.00,0.00,0.00,normal 0,tcp,http,SF,323,4822,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,51,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,191,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,15876,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,92,0.46,0.03,0.46,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,80,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,306,636,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3049,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.77,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,66,0.26,0.03,0.26,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1874,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,11,0.00,0.00,0.00,0.00,0.92,0.17,0.00,49,102,0.67,0.14,0.71,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.06,0.01,0.00,0.70,0.00,0.01,0.00,normal 25,tcp,ftp,SF,264,892,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,3,0.08,0.08,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,30,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,18,1.00,1.00,0.00,0.00,0.31,0.07,0.00,255,66,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,17,0.07,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,11,0.96,1.00,0.04,0.00,0.21,0.11,0.00,255,38,0.15,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,20,0.00,0.00,1.00,1.00,0.32,0.08,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.13,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,16,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,13,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,305,1,0.00,0.00,1.00,1.00,0.00,0.50,0.00,255,1,0.00,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,163,1404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,41,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,37,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,13,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,221,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,124,0.57,0.03,0.57,0.00,0.01,0.00,0.29,0.00,anomaly 0,tcp,smtp,SF,598,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,168,0.87,0.07,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,12164,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,1496,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,44,0.31,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,216,7384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,10,1.00,1.00,0.00,0.00,0.19,0.08,0.00,255,53,0.21,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1565,526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,52,129,0.21,0.06,0.02,0.02,0.00,0.00,0.00,0.04,normal 1133,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.84,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,234,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,64,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,4,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,231,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 9455,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,20,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,24,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,42,123,1.00,0.00,0.02,0.04,0.00,0.00,0.93,0.66,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,12,0.00,0.00,0.00,0.00,0.43,0.11,0.00,255,12,0.05,0.58,0.55,0.00,0.00,0.00,0.45,0.00,anomaly 0,tcp,http,SF,233,7355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,66,0.00,0.00,0.00,0.00,1.00,0.00,0.03,69,223,0.81,0.03,0.81,0.01,0.00,0.00,0.12,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,19,0.07,0.02,0.07,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,133,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,296,0.00,0.00,0.00,0.00,1.00,0.01,0.00,186,153,0.82,0.01,0.42,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,1,0.10,0.00,0.89,1.00,0.01,1.00,0.00,255,1,0.00,0.89,0.00,0.00,0.07,0.00,0.69,1.00,anomaly 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,79,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 12160,tcp,telnet,SF,339,1729,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.07,0.00,0.00,0.78,0.11,0.00,0.00,normal 0,tcp,smtp,SF,2171,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,193,160,0.65,0.03,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,472,9463,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,115,255,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 15168,tcp,ftp,SF,365,1202,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.02,0.00,0.00,0.21,0.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1177,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,181,0.52,0.06,0.02,0.01,0.02,0.00,0.00,0.00,normal 0,tcp,http,S2,54540,8315,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.04,0.04,anomaly 5,tcp,smtp,SF,1085,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,163,0.50,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,226,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,5,1.00,1.00,0.00,0.00,0.12,0.10,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,7510,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,51,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,19,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,17,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,57,0.22,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,44,0.42,0.04,0.42,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,559,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,122,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,22,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,26,78,1.00,0.00,0.04,0.08,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,219,767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,1107,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1404,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,175,0.54,0.23,0.08,0.01,0.00,0.00,0.00,0.01,normal 6064,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.66,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,923,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,6258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,18,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,245,188,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,0.17,30,255,1.00,0.00,0.03,0.04,0.03,0.01,0.00,0.01,normal 0,tcp,smtp,SF,1298,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,85,0.75,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.50,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,22,0.09,0.25,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,141,40380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,797,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,255,1.00,0.00,0.00,0.03,0.00,0.00,0.15,0.20,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,991,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,24,41,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,201,0.79,0.01,0.79,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,9,285,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,15,0.14,0.36,0.07,0.33,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,107,0.42,0.02,0.42,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,3,1.00,1.00,0.00,0.00,0.12,0.17,0.00,255,57,0.22,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,287,420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.31,0.00,0.00,1.00,0.94,normal 0,tcp,http,SF,319,176,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,41,0.05,0.02,0.00,0.02,1.00,0.00,0.10,134,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,295,1824,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,15,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,35,0.14,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,159,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,45,0.54,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,408,12001,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,8,255,1.00,0.00,0.12,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 618,tcp,telnet,SF,497,2342,0,0,0,0,0,1,12,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,19,0.10,0.05,0.01,0.00,0.03,0.26,0.00,0.00,normal 0,tcp,http,SF,184,34030,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,54540,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,32,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,87,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,98,0.38,0.08,0.44,0.00,0.01,0.02,0.00,0.00,normal 23,udp,domain_u,SF,42,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,16,0.00,0.00,0.00,0.00,1.00,0.00,0.31,255,244,0.96,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,6,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,4,1.00,1.00,0.00,0.00,0.11,0.16,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,11,0.00,0.00,1.00,1.00,0.10,0.08,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,10399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,10,255,1.00,0.00,0.10,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,119,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,933,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,190,2165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,1414,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,8,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,2904,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,314,1256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,209,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,50,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,150,0.59,0.42,0.59,0.00,0.09,0.00,0.33,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,22,1.00,1.00,0.00,0.00,0.18,0.04,0.00,255,22,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1250,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,255,93,0.36,0.24,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,3653,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,94,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5929,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,121,0.57,0.03,0.57,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1800,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,115,0.68,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,57,57,1.00,0.00,0.02,0.00,0.02,0.02,0.02,0.02,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,1.00,1.00,0.00,0.00,0.25,0.75,0.00,244,61,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,34,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,223,208,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1273,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,7,1.00,1.00,0.00,0.00,0.21,0.15,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,ftp,SF,1246,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,136,0.53,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,18,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,18,0.07,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,289,1080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,1,1.00,1.00,0.00,0.00,0.00,0.04,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,205,0.84,0.01,0.84,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,325,616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,17703,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,78,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,3198,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,76,82,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,165,141,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.02,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,1293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,5,0.00,0.00,1.00,1.00,0.07,0.09,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,25,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,221,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,89,1.00,0.00,0.11,0.22,0.00,0.00,1.00,1.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,43,238,1.00,0.00,0.02,0.24,0.00,0.00,1.00,1.00,normal 0,tcp,smtp,SF,2273,335,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,166,0.66,0.01,0.00,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,387,1601,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,186,1263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,2071,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,163,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,154,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,452,452,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,51,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,96,0.47,0.03,0.47,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,313,930,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,29,0.00,0.00,0.00,0.00,1.00,0.00,0.17,9,255,1.00,0.00,0.11,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,2224,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,6,1.00,1.00,0.00,0.00,0.40,0.13,0.00,255,46,0.18,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,333,342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,33,0.00,0.00,0.00,0.00,1.00,0.00,0.18,12,255,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.01,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,6428,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,272,2042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,X11,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,4,0.02,0.03,0.00,0.00,0.00,0.00,0.02,1.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,2168,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,1613,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,32,0.00,0.00,0.00,0.00,1.00,0.00,0.16,74,74,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,20,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,1209,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,849,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,11,254,1.00,0.00,0.09,0.15,0.00,0.00,1.00,1.00,normal 8,tcp,smtp,SF,2450,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,153,0.55,0.07,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,46,0.15,0.07,0.15,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,30,0.12,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,1477,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,20,0.23,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,11,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,15,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,3369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,2486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,10,1.00,1.00,0.00,0.00,0.20,0.08,0.00,255,55,0.22,0.04,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,162,0.64,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,4,0.00,0.00,0.00,0.00,0.80,0.40,0.00,255,18,0.07,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,693,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,1,0.01,0.00,0.94,1.00,0.01,1.00,0.00,249,1,0.00,0.53,0.00,0.00,0.00,0.00,0.48,1.00,anomaly 0,tcp,http,SF,200,1021,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,18,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,19,1.00,1.00,0.00,0.00,0.26,0.05,0.00,156,41,0.25,0.03,0.01,0.05,0.99,0.95,0.00,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,198,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,161,0.00,0.00,0.00,0.00,0.98,0.04,0.01,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,18,1.00,1.00,0.00,0.00,0.06,0.04,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,1735,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.03,0.03,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,54,255,1.00,0.00,0.02,0.16,0.00,0.01,1.00,0.99,normal 0,tcp,http,S3,344,201,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,11,0.20,0.18,0.00,0.00,1.00,0.00,0.27,5,255,1.00,0.00,0.20,0.02,0.20,0.01,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,4,0.02,0.51,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,208,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,125,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,1.00,1.00,0.00,0.00,0.50,0.50,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,337,3360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,268,681,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.02,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,139,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,21240,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,4,255,1.00,0.00,0.25,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,314,0.00,0.00,0.00,0.00,1.00,0.01,0.01,239,200,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,3,1.00,1.00,0.00,0.00,0.07,0.14,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,54,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,54,0.21,0.02,0.21,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,67,5,0.07,0.12,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,72,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,120,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.22,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,141,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,323,323,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,1185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.06,1.00,0.00,0.12,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,326,2659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,251,1.00,0.00,0.20,0.20,0.00,0.00,1.00,0.97,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,2,0.99,1.00,0.00,0.00,0.02,0.08,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,156,11431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.77,0.75,0.00,0.00,0.00,0.75,1.00,anomaly 0,tcp,http,SF,326,10755,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,18,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,16,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 28,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,0.33,0.67,0.50,96,93,0.97,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,13,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,177,14571,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,17,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,33,0.00,0.00,0.00,0.00,0.50,1.00,1.00,3,27,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,101,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,668,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,49,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,2,0.00,0.00,0.00,0.00,0.20,0.20,0.00,255,232,0.91,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,1232,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,44,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 7247,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,214,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,17,17,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,3,0.75,0.50,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1099,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,32,11,0.34,0.09,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,6,1.00,1.00,0.00,0.00,0.23,0.08,0.00,28,52,0.21,0.11,0.07,0.04,0.93,0.12,0.00,0.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,5,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,9458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,9,255,1.00,0.00,0.11,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,124,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,225,0.88,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,185,25618,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.01,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,911,2720,0,0,0,19,0,1,0,0,0,0,0,0,0,0,0,1,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,39,2,0.05,0.10,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,137,42,0.08,0.05,0.08,0.05,0.01,0.00,0.01,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,12,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,305,1546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.00,0.06,1.00,0.00,0.35,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.02,0.00,normal 11,tcp,telnet,SF,104,1413,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,1,0.02,0.08,0.02,0.00,0.00,0.00,0.00,0.00,normal 33,tcp,ftp,SF,938,2720,0,0,0,19,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,43,0.25,0.03,0.01,0.00,0.00,0.00,0.01,0.02,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,2,0.01,0.01,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,54,0.21,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,1,0.04,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 46,tcp,telnet,SF,889,558164,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,6,0.33,0.11,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,86,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,219,3,0.01,0.08,0.00,0.00,0.94,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,1,1.00,1.00,0.00,0.00,0.02,0.11,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,434,434,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,29,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.25,1.00,0.75,1.00,0.00,1.00,13,22,1.00,0.00,0.08,0.18,0.00,0.00,0.92,0.91,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,10,214,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,24,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,http,SF,258,646195,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.02,0.00,0.00,0.05,0.06,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,163,161,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,2510,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1546,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,6,0.02,0.73,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,3,1.00,1.00,0.00,0.00,0.14,0.27,0.00,255,15,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,175337,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,90,0.35,0.02,0.35,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,18046,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,10,255,1.00,0.00,0.10,0.15,0.00,0.00,1.00,0.68,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,4,1.00,1.00,0.00,0.00,0.50,0.25,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,179,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,47,0.26,0.03,0.26,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,4405,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,181,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,187,30606,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,111,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,2056,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,15915,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,25,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,347,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.22,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1376,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,36,0.61,0.08,0.61,0.06,0.00,0.03,0.00,0.00,normal 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,285,1757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,167,237,1.00,0.00,0.01,0.05,0.01,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.35,0.82,0.00,0.02,0.00,0.16,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1055,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,150,165,0.70,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,199,770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,236,0.93,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,12,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,16,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,309,475,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,3898,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,394,5643,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,238,0.93,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 25420,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.62,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,233,891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,19,0.00,0.00,0.00,0.00,1.00,0.00,0.26,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,11202,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,18,0.33,0.06,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1745,444,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,197,72,0.24,0.02,0.01,0.03,0.00,0.00,0.01,0.03,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,200,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,48,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,5,1.00,1.00,0.00,0.00,0.05,0.06,0.00,203,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,18,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,204921,380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,189,0.80,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S2,155,13543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,24,1.00,0.04,0.00,0.00,1.00,0.00,0.17,1,255,1.00,0.00,1.00,0.06,1.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,137,1,0.01,0.09,0.12,0.00,0.00,0.00,0.12,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,239,422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.07,0.00,0.00,0.36,0.84,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,16,0.00,0.00,1.00,1.00,0.15,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,169,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,194,0.76,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,5,1.00,1.00,0.00,0.00,0.23,0.18,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,2,0.00,0.00,0.00,0.00,0.25,0.25,0.00,255,247,0.97,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,1408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.14,0.00,0.00,0.00,0.14,0.57,0.00,255,1,0.00,0.62,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,64,0.25,0.04,0.25,0.00,0.17,0.00,0.02,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,1,0.00,0.00,0.00,0.00,0.10,0.20,0.00,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,171,409,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.01,0.06,0.01,0.00,0.00,normal 0,tcp,sunrpc,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,6,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,17,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,5336,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,51,0.47,0.06,0.47,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,108,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7233,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,185,102,0.39,0.02,0.39,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,13,1,0.08,1.00,0.08,0.00,0.00,0.00,0.85,1.00,anomaly 0,tcp,http,SF,220,1109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,163,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,7,363,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,5,0.04,0.05,0.01,0.40,0.00,0.00,0.00,0.20,normal 0,tcp,http,SF,226,1933,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,130,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,224,1783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1419,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,232,0.63,0.07,0.02,0.01,0.35,0.00,0.00,0.00,normal 0,tcp,finger,SF,7,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,20,0.11,0.09,0.02,0.10,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,3543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,13224,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,188,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,188,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,5202,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1407,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,148,21,0.14,0.52,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,101,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,7,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,1524,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,20,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,16,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,0.25,0.50,0.43,22,21,0.95,0.09,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,374,3796,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.04,0.04,0.00,0.00,1.00,0.00,0.00,85,255,1.00,0.00,0.01,0.03,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,215,292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,177,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,7384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,38,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,271,0.00,0.00,0.00,0.00,1.00,0.00,0.01,114,200,0.87,0.02,0.87,0.01,0.00,0.00,0.10,0.00,normal 0,tcp,http,SF,320,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,2,0.00,0.00,0.00,0.00,0.22,0.33,0.00,255,243,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,2,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 7976,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.53,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,1286,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,46,0.00,0.00,0.00,0.02,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1010,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,3,0.12,0.15,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,20,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,182,25961,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,249,155,0.62,0.03,0.62,0.00,0.01,0.00,0.25,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,8,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,988,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,20,153,0.30,0.10,0.05,0.01,0.00,0.00,0.00,0.07,normal 0,tcp,http,SF,315,462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,33,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,677,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,113,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,17733,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,1.00,1.00,0.00,0.00,0.25,0.50,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,4359,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.02,0.00,0.01,0.03,0.04,normal 0,tcp,http,SF,221,7637,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.04,0.01,0.01,0.00,0.00,normal 4,tcp,smtp,SF,1272,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,67,0.41,0.06,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,298,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,13,1.00,1.00,0.00,0.00,0.31,0.12,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,177,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,127,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2225,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,186,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,1347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.12,0.22,0.00,0.00,1.00,0.00,0.22,111,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,1296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.25,0.33,0.00,0.00,1.00,0.00,0.33,4,255,1.00,0.00,0.25,0.03,0.25,0.01,0.00,0.00,normal 0,tcp,http,SF,233,1388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,162,3656,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,126,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,29,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,17,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,11,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,203,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,12,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,263,8020,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,167,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,1412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,21,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,59,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,18,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,36,0.14,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,39,37,0.95,0.05,0.05,0.00,0.00,0.00,0.00,0.00,normal 66,tcp,http,SF,267,548,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,12,255,1.00,0.00,0.08,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,2,0.00,0.00,1.00,1.00,0.02,0.52,0.00,255,2,0.01,0.26,0.49,0.00,0.00,0.00,0.90,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,209,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,15,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S1,2101,323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,27,154,0.96,0.07,0.04,0.02,0.04,0.03,0.00,0.01,normal 0,tcp,ftp_data,SF,12286,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,9,54,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,5817,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,31,0.00,0.00,0.00,0.00,1.00,0.00,0.13,122,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 918,tcp,X11,SF,10468,334048,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,3,0.02,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,346,504,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,15,0.00,0.00,0.00,0.00,1.00,0.00,0.27,34,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 78,tcp,http,SF,303,185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,8,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1288,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.02,0.00,0.00,1.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,12,1.00,1.00,0.00,0.00,0.39,0.13,0.00,255,66,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,207,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,345,884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,18,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1609,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.51,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,telnet,SF,140,2169,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,3,1.00,0.00,1.00,0.67,0.00,0.00,0.00,0.33,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,10,0.00,0.00,1.00,1.00,0.13,0.08,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,20,0.00,0.00,0.00,0.00,0.44,0.09,0.00,255,65,0.25,0.27,0.78,0.00,0.05,0.00,0.17,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.38,0.32,0.00,0.20,0.00,0.33,1.00,anomaly 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,313,0.00,0.00,0.00,0.00,1.00,0.01,0.01,238,199,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,19,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.50,0.05,0.25,0.00,0.00,0.00,normal 0,tcp,http,SF,317,656,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,161,760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,350,1894,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,48,0.00,0.00,0.00,0.00,1.00,0.00,0.08,149,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,9,593,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,8,0.04,0.02,0.01,0.25,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,18,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,149,0.58,0.03,0.58,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,27,0.00,0.00,0.00,0.00,0.50,0.07,0.00,255,93,0.36,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,26,107,1.00,0.00,0.04,0.27,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,193,1069,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 12417,tcp,telnet,SF,866,148111,0,0,0,0,0,1,371,1,2,417,0,0,3,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,6,0.08,0.08,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,5,1.00,1.00,0.00,0.00,0.19,0.15,0.00,255,58,0.23,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,10,0.04,0.20,0.60,0.00,0.00,0.00,0.35,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,5,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,164,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,2,0.50,0.50,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1173,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,32,0.94,0.06,0.03,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,2,0.71,0.50,0.29,0.50,0.01,0.37,0.00,255,2,0.01,0.22,0.58,0.00,0.41,0.50,0.17,0.50,anomaly 0,tcp,http,SF,236,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,13,0.00,0.00,0.00,0.00,1.00,0.00,0.31,132,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,482,482,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,133,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,86,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,23,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,SF,1223,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,33,0.16,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,5,0.99,1.00,0.00,0.00,0.04,0.07,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,2881,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,57,0.69,0.19,0.69,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,381,693,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,172,2760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,5260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,25,2,0.04,1.00,0.04,1.00,0.00,0.00,0.92,1.00,anomaly 0,tcp,http,SF,299,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.14,1.00,0.00,0.29,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,132,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,16,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,29,0.11,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,213,2369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,802,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,120,0.90,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,354,2085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,139,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,80,254,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,6,358,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,10,0.02,0.02,0.01,0.20,0.00,0.20,0.00,0.00,normal 0,tcp,http,SF,236,1902,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,217,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,33,0.00,0.00,0.00,0.00,0.97,0.06,0.00,255,33,0.13,0.52,0.13,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9838,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.37,0.77,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,329,2126,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,183,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,194,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,1182,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,359,2282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,255,1.00,0.00,0.01,0.09,0.00,0.00,0.15,0.48,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,4046,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,47,47,0.00,0.00,0.00,0.00,1.00,0.00,0.00,177,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,90,0.35,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,9311,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,55,0.40,0.02,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.15,0.00,0.00,1.00,0.83,normal 0,tcp,http,SF,208,103,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,9,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1103,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,155,0.57,0.07,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,1,0.00,0.00,0.00,0.00,0.08,0.17,0.00,255,4,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,92,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,203,277,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,347,298,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,33,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,59,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,1,0.05,0.00,0.00,0.00,0.05,0.77,0.00,255,1,0.00,0.07,0.46,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,25429,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 42658,tcp,systat,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,142,2,0.01,0.10,0.15,0.00,0.00,0.00,0.15,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,17,0.00,0.00,1.00,1.00,0.41,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,188,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,10,0.04,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,151,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,15,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,15,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,144,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,20,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,4,151,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,408,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,3080,498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,32,0.13,0.01,0.00,0.00,0.00,0.00,0.87,0.00,normal 0,tcp,http,SF,291,3985,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,297,9317,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,124,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1978,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,39,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,8,0.03,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,382,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,457,457,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,223,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,119,0.40,0.48,0.39,0.02,0.00,0.00,0.46,0.01,normal 4,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,32,1.00,0.00,0.03,0.00,0.00,0.00,0.34,0.34,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 192,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.61,0.92,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,254,1628,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,238,0.93,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,16,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,594,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,15,0.00,0.00,0.00,0.00,1.00,0.00,0.27,28,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,254,1.00,0.00,0.50,0.09,0.00,0.00,1.00,1.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.20,0.00,0.80,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.12,0.00,0.88,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,18,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,871,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,199,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,147,4843,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,1078,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,5,1.00,1.00,0.00,0.00,0.56,0.33,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,15618,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,24,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,25,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,12,1.00,1.00,0.00,0.00,0.24,0.08,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,29,0.11,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.65,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,3,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,250,2647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,3,0.01,0.01,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,49640,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.05,0.05,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,35,2,0.03,1.00,0.03,1.00,0.00,0.00,0.89,1.00,anomaly 0,tcp,http,SF,215,2698,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,54,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,279,13574,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.05,0.08,0.00,0.00,0.00,normal 0,tcp,http,SF,242,8723,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,133,67,0.36,0.02,0.36,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,26,0.00,0.00,0.00,0.00,1.00,0.00,0.19,25,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,316,316,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,172,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,131,0.51,0.03,0.52,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,181,1.00,0.00,0.50,0.07,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,188,5556,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,69,0.95,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,29,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,65,0.38,0.31,0.38,0.03,0.00,0.05,0.00,0.00,normal 0,tcp,ftp_data,SF,749,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,46,0.29,0.45,0.29,0.00,0.00,0.00,0.43,0.02,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.15,0.00,0.00,0.58,0.85,normal 0,tcp,http,SF,308,566,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,44,0.00,0.00,0.00,0.00,1.00,0.00,0.07,187,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,27,0.11,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,6932,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,46,0.15,0.06,0.15,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,25044,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,144,0.00,0.00,0.00,0.00,1.00,0.00,0.01,242,122,0.50,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,97,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,261,250,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,240,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,91,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,tcp,smtp,SF,851,479,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,37,0.15,0.02,0.01,0.00,0.00,0.00,0.83,0.00,normal 0,tcp,http,SF,325,818,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,44,53,1.00,0.00,0.02,0.04,0.00,0.00,0.39,0.49,normal 0,tcp,http,SF,207,3018,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,360,1,0.04,1.00,0.94,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.05,1.00,0.95,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,17,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,64,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,2768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,5,0.00,0.00,0.00,0.00,0.33,0.20,0.00,255,5,0.02,0.15,0.45,0.00,0.00,0.00,0.47,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,20,1.00,1.00,0.00,0.00,0.20,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,263,769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,55,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,87,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,18,0.00,0.00,0.00,0.00,0.05,0.10,0.11,255,1,0.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,1800,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,9,0.99,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,956,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,217,2,0.01,0.08,0.00,0.00,0.94,1.00,0.00,0.00,anomaly 3143,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.64,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,368,7956,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,3676,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,91,0.46,0.02,0.46,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,383,345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,82,231,1.00,0.00,0.01,0.18,0.00,0.00,0.07,0.67,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,89,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,89,0.35,0.01,0.35,0.00,0.00,0.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1555,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,103,181,0.75,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1630,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,20,165,0.95,0.10,0.05,0.01,0.00,0.00,0.00,0.04,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,42,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 4,tcp,smtp,SF,1608,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,146,0.75,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,9,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.24,0.00,0.76,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.84,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,107,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,8,0.00,0.00,0.00,0.00,0.32,0.12,0.00,255,8,0.03,0.71,0.31,0.00,0.16,0.00,0.53,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.13,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.90,1.00,anomaly 0,tcp,http,SF,492,9020,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.04,0.00,0.00,1.00,0.00,0.17,2,255,1.00,0.00,0.50,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,224,12987,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,127,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,6,1.00,1.00,0.00,0.00,0.23,0.15,0.00,255,65,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,7203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,11,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 149,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.61,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,9,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,22,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 23,tcp,ftp,SF,306,1043,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,15,0.13,0.06,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,242,148,0.61,0.03,0.61,0.00,0.01,0.00,0.26,0.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,11,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,1,0.08,0.00,0.00,0.00,0.08,0.83,0.00,106,1,0.01,0.12,0.45,0.00,0.01,0.00,0.01,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,7,0.97,1.00,0.03,0.00,0.20,0.14,0.00,255,28,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,15,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1180,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,100,161,0.78,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,15,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.71,0.71,1.00,0.00,0.00,42,247,1.00,0.00,0.02,0.19,0.00,0.00,0.95,0.99,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,4,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,1,0.01,0.00,0.96,1.00,0.00,1.00,0.00,255,1,0.00,0.83,0.00,0.00,0.01,0.00,0.78,1.00,anomaly 0,tcp,http,SF,329,4511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,190,682,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,71,1.00,0.00,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,15,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,4,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,9,1.00,1.00,0.00,0.00,0.21,0.12,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,6,1.00,1.00,0.00,0.00,0.18,0.12,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,17,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,10,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,880,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,165,0.61,0.11,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,64,2,0.02,1.00,0.02,1.00,0.00,0.00,0.97,1.00,anomaly 0,tcp,smtp,SF,1353,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,149,0.58,0.03,0.00,0.00,0.01,0.02,0.00,0.01,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,73,0.07,0.09,0.07,0.03,0.00,0.00,0.02,0.00,normal 9,tcp,telnet,SF,106,1423,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,3,0.01,0.04,0.01,0.67,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,48,0.19,0.03,0.19,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,925,360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,201,0.79,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,252,913,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,18,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,82,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5658,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1008,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,149,194,0.64,0.04,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,292,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,3,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,SF,1197,2447,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,68,0.27,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,308,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12241,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,56,0.22,0.05,0.22,0.00,0.36,0.00,0.02,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,20,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,555,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,21,0.00,0.00,0.00,0.00,1.00,0.00,0.19,42,231,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,18,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,180,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,157,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,171,0.67,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,19,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,326,1471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,3182,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,389,10326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,846,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,157,109,0.69,0.02,0.01,0.00,0.00,0.00,0.69,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1556,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,43,0.22,0.02,0.22,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,16,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,39,2,0.03,1.00,0.03,1.00,0.00,0.00,0.90,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,9,255,1.00,0.00,0.11,0.09,0.00,0.00,1.00,0.89,normal 0,udp,domain_u,SF,43,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,192,0.00,0.00,0.00,0.00,1.00,0.00,0.02,182,196,0.78,0.02,0.69,0.01,0.00,0.00,0.08,0.00,normal 0,tcp,http,SF,310,813,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,77,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,141,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,6,0.06,0.05,0.01,0.00,0.02,0.17,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,219,0.86,0.09,0.86,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,820,323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,247,0.98,0.03,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,42,0.16,0.67,0.15,0.05,0.00,0.00,0.59,0.02,normal 0,tcp,http,SF,236,2625,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,40,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,0.00,0.00,0.99,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2444,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,157,0.62,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1199,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,98,0.38,0.03,0.38,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,39,1,0.03,1.00,0.03,0.00,0.00,0.00,0.90,1.00,anomaly 0,tcp,http,SF,241,688,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,102,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.04,normal 0,tcp,finger,S1,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,4,7,0.50,0.50,0.25,0.43,1.00,0.29,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,229,1.00,0.00,0.17,0.07,0.00,0.00,1.00,0.60,normal 0,tcp,time,S2,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,2,2,1.00,1.00,0.00,0.00,1.00,0.00,0.00,22,22,1.00,0.00,0.09,0.00,0.09,0.09,0.05,0.05,normal 0,tcp,smtp,SF,6237,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,77,156,0.68,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,18,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,9,1.00,1.00,0.00,0.00,0.50,0.11,0.00,178,52,0.28,0.02,0.01,0.04,1.00,0.94,0.00,0.00,anomaly 113,tcp,telnet,SF,6274,16771,0,0,0,5,0,1,2,1,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,3,1.00,1.00,0.00,0.00,0.13,0.09,0.00,23,30,0.13,0.09,0.04,0.07,1.00,0.10,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,91,1.00,0.00,1.00,0.46,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,38,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,6,0.04,0.06,0.01,0.33,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,16,0.00,0.00,1.00,1.00,0.15,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,20,0.08,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,17,17,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,7066,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,2,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,884,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,6,0.40,0.20,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,259,870,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,208,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,171,0.67,0.16,0.67,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,168,8,0.05,0.04,0.01,0.00,0.01,0.00,0.08,1.00,normal 6,tcp,telnet,SF,103,1021,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,4,0.01,0.04,0.01,0.50,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1052,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,174,0.66,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,188,655,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,20,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,121,0.30,0.04,0.30,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,323,4396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,3649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,0.91,0.00,0.00,0.07,0.00,0.74,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,14,213,1.00,0.00,0.07,0.21,0.00,0.00,1.00,0.98,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,241,235,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,1.00,1.00,0.00,0.00,1.00,0.00,0.00,3,3,1.00,0.00,0.33,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,17,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,118,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,194,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,454,454,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,S1,8325,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,229,1,0.00,0.12,0.42,0.00,0.01,1.00,0.00,0.00,normal 1,tcp,smtp,SF,978,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,8,166,0.62,0.38,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,39,39,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,13,0.00,0.00,0.00,0.00,0.50,1.00,0.15,255,235,0.92,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,16,1.00,1.00,0.00,0.00,0.11,0.04,0.00,255,16,0.06,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,1,0.00,0.00,1.00,1.00,0.03,0.59,0.00,255,1,0.00,0.07,0.11,0.00,0.00,0.00,0.85,1.00,anomaly 0,tcp,http,SF,307,2360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,2,143,1.00,0.00,0.50,0.20,0.00,0.00,0.00,0.65,normal 0,tcp,http,SF,239,7629,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,253,1.00,0.00,1.00,0.19,0.00,0.00,0.00,0.99,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,27,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,988,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,125,140,0.40,0.06,0.01,0.01,0.02,0.02,0.00,0.00,normal 12,tcp,ftp_data,SF,7045,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,62,0.24,0.13,0.34,0.00,0.02,0.02,0.00,0.00,anomaly 0,tcp,http,SF,150,6818,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,162,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,24,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,24,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,180,20504,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,1268,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,10,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,62,0.24,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,78,6,0.08,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,15,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 31729,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,1,0.00,0.00,0.00,0.00,0.05,0.25,0.00,255,1,0.00,0.24,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 642,tcp,ftp,SF,1150,3380,0,0,0,24,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,57,0.27,0.33,0.00,0.00,0.00,0.00,0.30,0.02,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.25,0.50,0.00,0.00,0.50,0.50,0.00,49,131,0.29,0.08,0.04,0.02,0.02,0.02,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,14,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,405,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.50,1.00,0.00,0.75,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.20,0.00,0.79,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.84,1.00,anomaly 0,tcp,http,SF,292,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,69,69,1.00,0.00,0.01,0.00,0.01,0.01,0.57,0.57,normal 0,tcp,http,SF,315,1660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 362,tcp,telnet,SF,292,1970,0,0,0,0,0,1,7,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,9,0.45,0.20,0.05,0.00,0.05,0.11,0.00,0.00,normal 4,udp,domain_u,SF,57,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,168,157,0.93,0.02,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,1.00,1.00,0.00,0.00,1.00,0.00,0.00,97,57,0.59,0.02,0.01,0.00,0.98,0.96,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,12,0.00,0.00,1.00,1.00,0.08,0.06,0.00,67,12,0.18,0.09,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,228,8550,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,1.00,1.00,0.00,0.00,0.50,0.75,0.00,255,42,0.16,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,113,1,0.01,0.58,0.58,0.00,0.05,0.00,0.56,1.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,2,0.00,0.00,0.00,0.00,0.18,0.18,0.00,255,2,0.01,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1170,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,21,0.84,0.16,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,2486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,84,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,293,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,110,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2844,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,169,0.66,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,355,2761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,236,255,1.00,0.00,0.00,0.02,0.01,0.01,0.07,0.07,normal 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,150,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,49,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,241,33054,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,9,0.11,0.03,0.11,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,340,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,19,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,352,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,14560,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,94,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,94,0.37,0.04,0.37,0.00,0.02,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,209,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,26,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,120,1.00,0.00,1.00,0.22,0.00,0.00,1.00,1.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,207,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,120,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,210,0.82,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,2748,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,38,0.00,0.00,0.00,0.00,1.00,0.00,0.05,227,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,479,1,0.08,1.00,0.89,0.00,0.00,0.95,0.00,255,1,0.00,0.92,0.00,0.00,0.10,1.00,0.90,0.00,anomaly 0,udp,domain_u,SF,45,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,56,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,172,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1339,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,155,183,0.65,0.08,0.01,0.01,0.01,0.00,0.03,0.04,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,1,0.69,1.00,0.31,0.00,0.01,0.39,0.00,255,1,0.00,0.24,0.63,0.00,0.44,1.00,0.19,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,1233,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,151,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,3248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,80,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 4263,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,169,2,0.01,0.57,0.87,0.00,0.00,0.00,0.00,0.00,normal 23,tcp,smtp,SF,11935,1384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,14,160,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,1054,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,5,0.03,0.10,0.03,0.40,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,9,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,1452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,142,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.02,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,32,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,56,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,10384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,18,0.00,0.00,0.00,0.00,0.28,0.06,0.00,255,18,0.07,0.23,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,322,322,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,2,1.00,1.00,0.00,0.00,0.18,0.27,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,167,2770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,235,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,19,1.00,1.00,0.00,0.00,0.28,0.06,0.00,255,59,0.23,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,2,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,6,0.06,0.07,0.06,0.00,0.02,0.00,0.63,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9,tcp,smtp,SF,1435,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,122,146,0.48,0.03,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,377,1911,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,59,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,6,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,6,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,230,24647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,12,255,1.00,0.00,0.08,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,189,10561,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,266,1646,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,320,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,8,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,18,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,78,0.94,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 5410,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,16,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,17,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,58,0.26,0.03,0.26,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,30,0.12,0.11,0.12,0.00,0.10,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,9,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,82,0.33,0.05,0.35,0.02,0.03,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,207,0.81,0.02,0.81,0.00,0.00,0.00,0.02,0.00,anomaly 0,tcp,ftp_data,SF,3690,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,26,56,0.46,0.12,0.46,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,337,441,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,678,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,250,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,1,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,172,0.81,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,10864,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,92,0.53,0.03,0.01,0.00,0.02,0.00,0.08,0.05,normal 0,tcp,http,SF,319,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,243,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,960,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,25,0.21,0.28,0.45,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1065,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.88,0.00,0.00,1.00,0.00,0.25,182,129,0.53,0.03,0.01,0.02,0.00,0.00,0.04,0.02,normal 0,tcp,http,SF,319,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,RSTO,6234,1628,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,91,75,0.15,0.78,0.01,0.03,0.00,0.00,0.74,0.01,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,8,0.00,0.00,1.00,1.00,0.05,0.08,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,20,0.00,0.00,1.00,1.00,0.24,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,345,1069,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,267,11798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,119,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,112,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,1,0.10,0.00,0.89,1.00,0.01,1.00,0.00,255,1,0.00,0.88,0.00,0.00,0.07,0.00,0.68,1.00,anomaly 0,tcp,http,SF,199,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,18,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,304,1909,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,5760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,940,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,21,84,1.00,0.00,0.05,0.08,0.00,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,9,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,29,0.11,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,216,655,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,9,0.09,0.09,0.03,0.22,0.03,0.11,0.00,0.00,normal 1,tcp,smtp,SF,1517,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,32,186,0.62,0.12,0.03,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,213,1691,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,25,0.00,0.00,0.00,0.04,1.00,0.00,0.20,216,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,248,6356,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,2,151,1.00,0.00,1.00,0.12,0.00,0.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,24,0.11,0.05,0.11,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,7,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,27,0.11,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,411,3616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,39,0.03,0.02,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,8,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S1,286,33580,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.08,0.05,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,1227,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,21,1.00,0.00,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,17,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,9,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,RSTO,125,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,3,1.00,0.00,0.33,0.00,0.33,0.33,0.67,0.67,anomaly 0,tcp,http,SF,153,1572,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.05,0.00,0.02,0.00,0.00,normal 0,tcp,http,SF,259,448,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,13,1.00,0.00,1.00,0.31,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,316,912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,smtp,SF,729,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,22,130,0.68,0.18,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,189,23086,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,1,0.09,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,0.96,0.00,0.00,0.08,0.00,0.83,1.00,anomaly 1,tcp,smtp,SF,998,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,17,117,0.12,0.18,0.06,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,143,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,170,0.67,0.02,0.67,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,441,441,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,175,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,334,15650,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,1487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,222,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1005,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,225,138,0.61,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,1,0.03,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,1899,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,4907,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,1540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.09,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,61,2,0.02,1.00,0.02,1.00,0.00,0.00,0.95,1.00,anomaly 0,tcp,http,SF,297,12894,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,17,17,1.00,0.00,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.82,0.82,0.00,0.00,0.00,0.82,1.00,anomaly 0,tcp,http,SF,226,2180,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,91,1.00,0.00,0.02,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,14,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,7,220,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,11,0.12,0.25,0.12,0.27,0.00,0.27,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,13,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,4,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,9,1.00,0.00,1.00,0.56,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,5,0.00,0.00,0.00,0.00,0.22,0.13,0.00,255,5,0.02,0.91,0.10,0.00,0.03,0.00,0.87,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,9,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.50,0.25,0.00,0.00,1.00,0.00,0.50,5,255,1.00,0.00,0.40,0.03,0.20,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,9,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,2,0.00,0.00,1.00,1.00,0.02,0.09,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,9950,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,7,254,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,18,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,253,253,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 2713,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.86,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,11,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,11,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,976,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,147,0.45,0.07,0.01,0.01,0.00,0.01,0.00,0.00,normal 1,tcp,smtp,SF,122,232,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,43,0.20,0.82,0.01,0.05,0.01,0.02,0.78,0.05,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,173,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,561,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,84,0.70,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,1,0.00,0.00,0.00,0.00,0.03,0.06,0.00,102,5,0.01,0.06,0.01,0.40,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,22,25,1.00,0.00,0.05,0.08,0.00,0.08,1.00,0.92,normal 10,tcp,http,SF,194,954639,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,1471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,231,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,24,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,42,0.16,0.02,0.16,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,10,0.99,1.00,0.00,0.00,0.10,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,10,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,255,6734,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,2,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,14,0.97,1.00,0.03,0.00,0.22,0.09,0.00,255,34,0.13,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,2076,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,7487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,37,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1769,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,142,0.53,0.02,0.00,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,209,933,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,253,1.00,0.00,0.50,0.04,0.00,0.00,1.00,0.84,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,102,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,247,2265,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,185,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,9,1.00,1.00,0.00,0.00,0.10,0.08,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,14189,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,18,0.90,0.10,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,36,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,12,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,333,774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,36,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,26098,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,207,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,160,1.00,0.00,0.50,0.04,0.00,0.00,1.00,1.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,277,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,66,0.79,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,240,28,0.12,0.03,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,2,1.00,1.00,0.00,0.00,0.07,0.22,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,6601,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,113,74,0.46,0.05,0.46,0.03,0.00,0.00,0.00,0.00,normal 4345,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.73,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,106,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,38,2,0.03,1.00,0.03,1.00,0.00,0.00,0.95,1.00,anomaly 0,tcp,http,SF,288,2153,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,44,44,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 7,tcp,telnet,SF,105,2138,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,1,0.02,0.11,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,4,14,0.50,0.50,0.50,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,166,1,0.01,0.71,0.71,0.00,0.04,0.00,0.63,1.00,anomaly 0,tcp,http,SF,202,1220,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,2872,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,3630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,7,255,1.00,0.00,0.14,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,254,170,0.67,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,252,654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,204,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,282,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,116,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,309,3928,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,145,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 40423,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.42,0.83,0.00,0.00,0.00,0.83,1.00,anomaly 3,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,210,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,183,11087,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.15,0.40,0.00,0.00,0.00,0.53,0.00,anomaly 0,tcp,http,SF,216,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,5,1.00,0.00,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.93,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,113,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,148,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,196,0.77,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,101,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,126,112,0.89,0.02,0.01,0.00,0.00,0.00,0.05,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 17,tcp,telnet,SF,104,2827,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,4,0.04,0.08,0.02,0.75,0.00,0.25,0.00,0.00,normal 0,tcp,http,SF,227,7488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 25,tcp,smtp,SF,939,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,89,0.48,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,249,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1525,474,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,37,0.15,0.02,0.00,0.00,0.00,0.00,0.80,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,0,376,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,63,0.34,0.16,0.03,0.03,0.00,0.00,0.06,0.00,normal 0,tcp,http,SF,186,8658,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,336,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.40,0.40,0.00,0.00,1.00,0.00,0.00,137,255,1.00,0.00,0.01,0.04,0.01,0.01,0.12,0.08,normal 0,tcp,http,SF,284,1444,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,172,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,584,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,1.00,1.00,0.00,0.00,1.00,0.00,0.00,115,135,0.46,0.02,0.01,0.01,0.98,0.39,0.00,0.00,anomaly 1,tcp,smtp,SF,1365,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,123,0.48,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,9,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,212,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,234,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,157,607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.33,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,224,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1970,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,107,127,0.96,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,6722,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,67,1.00,0.00,0.01,0.00,0.00,0.00,0.18,0.18,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,356,1,0.03,1.00,0.95,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,1.00,0.96,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,44,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,8,1.00,1.00,0.00,0.00,0.22,0.11,0.00,255,48,0.19,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,313,1,0.00,0.00,1.00,1.00,0.00,0.50,0.00,255,1,0.00,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,13,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,292,7635,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,18,1.00,1.00,0.00,0.00,0.26,0.06,0.00,255,64,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,154,409,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,119,223,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,13,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,12,1.00,1.00,0.00,0.00,0.24,0.10,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,9178,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,96,0.36,0.02,0.36,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,755,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,71,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 8795,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,12,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,94,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,230,469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,15,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,9763,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,12,0.05,0.02,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,210,910,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,1448,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1506,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,70,0.63,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,226,23,0.10,0.05,0.10,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1456,405,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,67,0.26,0.05,0.00,0.00,0.46,0.00,0.02,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,1287,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,119,197,0.81,0.02,0.81,0.01,0.01,0.00,0.11,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,4,1.00,1.00,0.00,0.00,0.22,0.22,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,62,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3690,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,120,0.49,0.02,0.49,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,242,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,19,0.00,0.00,1.00,1.00,0.15,0.05,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,173,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,4080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,211,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,892,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,132,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,305,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.02,0.00,0.01,normal 0,udp,domain_u,SF,44,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,269,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,200,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,27928,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1013,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,25,0.50,0.04,0.00,0.00,1.00,0.00,0.24,10,252,1.00,0.00,0.10,0.05,0.10,0.00,0.00,0.00,normal 0,tcp,http,SF,227,4454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,986,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,14,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1502,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,5,0.50,0.30,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,27280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,64,255,1.00,0.00,0.02,0.02,0.02,0.01,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,14,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,16,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,17,1.00,1.00,0.00,0.00,0.21,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,2527,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,200,626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,3591,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,1,0.00,0.00,0.95,1.00,0.05,1.00,0.00,138,1,0.01,0.25,0.01,0.00,0.00,0.00,0.16,1.00,anomaly 1,tcp,smtp,SF,1915,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,106,65,0.61,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12983,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,68,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.14,0.00,0.00,0.00,0.14,0.57,0.00,255,1,0.00,0.62,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,305,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,16,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,7,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,1451,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,4061,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,351,3675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,23,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,13,1.00,1.00,0.00,0.00,0.59,0.09,0.00,255,53,0.21,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,14,0.99,1.00,0.00,0.00,0.12,0.07,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,268,9518,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,140,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1759,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,13,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,19,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,104,0.59,0.06,0.59,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,210,0.82,0.01,0.82,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,7190,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,240,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,18037,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,19,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 11,tcp,private,SF,6,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,511,1,0.09,0.00,0.90,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.14,0.00,0.85,0.00,anomaly 0,tcp,http,SF,233,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.57,113,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 23,tcp,ftp,SF,316,1043,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,174,46,0.26,0.03,0.01,0.00,0.00,0.00,0.01,0.02,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,13,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1290,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,189,164,0.63,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,19,1.00,1.00,0.00,0.00,0.16,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,5,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,105,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,123,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,222,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,142,0.56,0.01,0.56,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.75,0.00,48,1,0.02,0.60,0.85,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,266,486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,12,0.00,0.00,1.00,1.00,0.10,0.08,0.00,255,12,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,211,1349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,58,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,894,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,188,160,0.64,0.10,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,9,1.00,1.00,0.00,0.00,0.31,0.07,0.00,255,9,0.04,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,17,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,44,0.17,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,20,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,5,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,244,1.00,0.00,0.50,0.13,0.00,0.00,1.00,0.79,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,220,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,7,65,1.00,0.00,0.14,0.28,0.00,0.00,1.00,1.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,3,1,0.33,0.67,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,181,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,353,7262,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,66,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,756,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,238,0.93,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,150,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 26525,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,1,0.01,0.65,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,17,1.00,1.00,0.00,0.00,0.21,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,178,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,13,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,11,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,150,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,85,0.00,0.00,0.00,0.00,1.00,0.00,0.04,203,138,0.68,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,26340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.01,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,14,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,9,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,17,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,12,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,12,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,38,54,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 3983,tcp,IRC,S3,390,7872,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.50,1.00,0.00,0.00,0.50,1.00,0.00,9,5,0.56,0.22,0.11,0.00,0.11,0.20,0.44,0.80,normal 0,udp,domain_u,SF,45,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,122,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,196,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,123,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,4,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,90,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,2,0.00,0.00,0.99,1.00,0.02,0.08,0.00,255,22,0.09,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,321,867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,35,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,35096,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.59,0.00,0.00,0.00,0.00,0.55,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,19,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,24,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,11895,1359,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,201,134,0.67,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,5175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,201,1.00,0.00,0.33,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,20,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,35,0.38,0.04,0.38,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,994,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,13,0.00,0.00,0.00,0.00,1.00,0.00,0.38,169,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,107,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,965,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,125,0.49,0.02,0.49,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,93,14,0.15,0.04,0.15,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,2113,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,222,267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 4834,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,3,0.01,0.57,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,226,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,162,19994,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,2251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,29,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1907,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,50,247,0.98,0.04,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,161,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 16,tcp,smtp,SF,2635,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,117,97,0.83,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,194,19,0.10,0.06,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,160,1.00,0.00,0.33,0.05,0.00,0.01,1.00,0.99,normal 26090,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.72,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,298,2275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,39,0.00,0.03,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,284,681,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,13,255,1.00,0.00,0.08,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,10,1.00,1.00,0.00,0.00,0.32,0.10,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,297,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,3480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,182,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,19,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,292,2572,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,1215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,255,1.00,0.00,0.00,0.01,0.00,0.00,0.01,0.01,normal 0,tcp,ftp_data,SF,15722,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,165,63,0.38,0.02,0.38,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,58,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,25,0.10,0.01,0.10,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,324,9572,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,910,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,160,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 32,tcp,ftp,SF,1460,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,59,0.26,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,20,1.00,1.00,0.00,0.00,0.09,0.08,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,14,1.00,1.00,0.00,0.00,0.21,0.06,0.00,255,54,0.21,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,2495,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.01,normal 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,234,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,17,249,1.00,0.00,0.06,0.01,0.00,0.00,1.00,0.07,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,111,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,167,149,0.69,0.02,0.01,0.01,0.00,0.00,0.05,0.05,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,35,0.14,0.44,0.67,0.00,0.03,0.00,0.30,0.00,anomaly 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,12,0.13,0.04,0.13,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,9,1.00,1.00,0.00,0.00,0.18,0.12,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 88,tcp,http,SF,338,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,2,253,1.00,0.00,0.50,0.21,0.00,0.00,0.00,0.80,normal 0,tcp,smtp,SF,1534,401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,54,0.21,0.06,0.00,0.00,0.53,0.00,0.01,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,69,0.27,0.15,0.27,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1081,377,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,202,0.82,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,5,0.00,0.00,0.00,0.00,0.11,0.06,0.40,255,28,0.11,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,172,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,1,0.02,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,24,0.19,0.02,0.19,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,6,0.00,0.00,0.00,0.00,0.35,0.41,0.00,255,6,0.02,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,SF,10,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.07,0.00,0.00,0.78,0.00,0.01,0.00,normal 0,tcp,http,SF,226,1705,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,2400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,148,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,315,314,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2077,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,211,133,0.55,0.03,0.00,0.02,0.01,0.02,0.00,0.00,normal 42021,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,196,2,0.01,0.20,0.39,0.00,0.00,0.00,0.39,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,14,1.00,1.00,0.00,0.00,0.41,0.06,0.00,255,14,0.05,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,26,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,1030,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,118,0.46,0.01,0.46,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,4281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,208,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,25,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,259,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,18,0.08,0.02,0.08,0.11,0.00,0.00,0.02,0.00,normal 0,tcp,ftp_data,SF,495,0,0,0,0,0,0,1,0,0,0,5,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,52,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,85,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,222,0.87,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,228,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,9,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,280,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,61,0.40,0.03,0.40,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,63,0.23,0.02,0.23,0.03,0.00,0.00,0.03,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,8,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,6,0.00,0.00,1.00,1.00,0.40,0.13,0.00,255,26,0.10,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,611,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,149,0.58,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2143,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,197,95,0.48,0.03,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,1874,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,7,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,6,1.00,1.00,0.00,0.00,0.24,0.16,0.00,255,66,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,151,1946,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,1271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2094,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,92,241,0.98,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1370,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,125,110,0.88,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,74,1.00,0.00,0.01,0.00,0.00,0.00,0.19,0.19,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,4,0.80,0.40,0.20,0.00,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1473,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,25,0.23,0.05,0.01,0.00,0.00,0.00,0.03,0.04,normal 0,tcp,http,SF,154,30328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,1208,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,50,50,0.00,0.00,0.02,0.02,1.00,0.00,0.00,99,255,1.00,0.00,0.02,0.03,0.00,0.00,0.01,0.01,normal 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,108,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 15,tcp,smtp,SF,11430,1383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,6,125,0.83,0.33,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,64,2,0.02,1.00,0.02,1.00,0.00,0.00,0.95,1.00,anomaly 0,tcp,http,SF,217,931,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,324,1,0.10,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,153,0.60,0.03,0.60,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,17,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,18,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,2072,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,149,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,21,0.08,0.18,0.08,0.00,0.00,0.00,0.00,0.00,anomaly 13,tcp,smtp,SF,954,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,40,28,0.70,0.05,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,11,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,11,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,9,1.00,1.00,0.00,0.00,0.24,0.14,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,328,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,15,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,13,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,24,1.00,1.00,0.00,0.00,0.29,0.06,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,4858,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,110,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,23,0.77,0.07,0.77,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,332,3085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,44,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,14,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,89,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,18,0.07,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,75,1.00,0.00,0.17,0.13,0.00,0.00,1.00,1.00,normal 0,tcp,smtp,SF,2932,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,67,0.67,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,239,501,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,41,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,236,667,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,178,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,4,1.00,1.00,0.00,0.00,0.33,0.33,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1821,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,187,0.64,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,16,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,2731,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,16,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,5790,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.09,0.00,0.00,0.00,0.98,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,29,5,0.07,0.17,0.03,0.40,0.00,0.00,0.00,0.00,normal 39507,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,317,15675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,13,1.00,0.00,1.00,0.54,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,19,0.62,1.00,0.00,0.00,0.10,0.04,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,5669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.01,0.00,0.00,0.13,0.02,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,17,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,46,0.34,0.04,0.34,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,220,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,344,12009,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,20,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,6,1.00,1.00,0.00,0.00,0.14,0.12,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,3537,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,142,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,190,4918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3019,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,37,0.15,0.73,0.00,0.00,0.71,0.00,0.00,0.00,normal 0,tcp,http,SF,200,2710,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,31,0.12,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,848,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,166,0.79,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,108,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,16,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,SF,8,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,44,0.17,0.02,0.00,0.00,0.69,0.91,0.00,0.00,normal 0,tcp,http,SF,282,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,42,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,7,1,0.14,1.00,0.14,0.00,0.00,0.00,0.71,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,80,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 4,tcp,ftp,SF,1232,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,74,0.30,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,240,484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,43,255,1.00,0.00,0.02,0.03,0.05,0.02,0.00,0.00,normal 0,tcp,http,SF,214,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,2,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,11,1.00,1.00,0.00,0.00,0.10,0.08,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,1680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,227,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,127,0.00,0.00,0.00,0.00,1.00,0.00,0.02,245,180,0.73,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1195,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,7,255,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,1.00,1.00,0.00,0.00,1.00,0.00,0.00,94,54,0.57,0.02,0.01,0.00,0.98,0.96,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,19,0.00,0.00,1.00,1.00,0.19,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,26,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,683,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,49,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,5077,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,30,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,4861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,36,81,0.06,0.11,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1339,276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,100,0.91,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 169,tcp,telnet,SF,1567,2857,0,0,0,3,0,1,4,1,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 24,tcp,ftp,SF,220,767,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,70,27,0.39,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,194,679,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,200,1,0.00,0.95,0.96,0.00,0.96,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,1533,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,132,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,17,1.00,1.00,0.00,0.00,0.14,0.08,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,1101,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,122,225,0.96,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,372,12818,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.17,0.14,0.00,0.00,1.00,0.00,0.29,136,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,63,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.07,0.01,0.00,0.93,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,11864,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,17,1.00,1.00,0.00,0.00,0.20,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,337,474,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,16,255,1.00,0.00,0.06,0.03,0.00,0.00,0.06,0.00,normal 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,216,106,0.39,0.04,0.39,0.02,0.00,0.00,0.00,0.00,normal 2,tcp,ftp,SF,1254,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,134,0.53,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,260,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,44,44,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,OTH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.07,0.07,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.04,0.03,0.00,0.00,0.00,normal 0,tcp,http,SF,312,839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,223,255,1.00,0.00,0.00,0.02,0.00,0.00,0.01,0.01,normal 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,117,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,574,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,102,0.89,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,86,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,233,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,252,1628,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,41,40,0.98,0.05,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,159,9569,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,17,0.07,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,13,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,169,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,1761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,30,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,12,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,2181,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,199,1.00,0.00,0.06,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,248,16626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,171,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,184,21900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,10,10,1.00,0.00,0.10,0.00,0.10,0.10,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,119,0.47,0.18,0.47,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,219,7734,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,113,0.44,0.01,0.44,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,1,0.10,0.00,0.89,1.00,0.01,1.00,0.00,255,1,0.00,0.89,0.00,0.00,0.07,0.00,0.70,1.00,anomaly 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,9,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,5,0.02,0.05,0.02,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,146,7,0.05,0.08,0.01,0.00,0.90,1.00,0.01,0.00,anomaly 0,tcp,finger,SF,7,225,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,13,0.07,0.07,0.01,0.15,0.04,0.15,0.00,0.00,normal 0,tcp,http,SF,224,3970,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,2750,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,715,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 4610,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,2,0.01,0.83,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 40806,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.36,0.70,0.00,0.00,0.00,0.70,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,15,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,1694,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 2,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,3,0.02,0.03,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,2,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,141,1,0.01,0.31,0.30,0.00,0.00,0.00,0.30,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.58,0.57,0.00,0.00,0.00,0.57,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,217,255,1.00,0.00,0.00,0.02,0.00,0.00,0.25,0.36,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,176,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,48,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 131,tcp,http,SF,331,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,11,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,985,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,152,0.64,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,54060,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.25,0.25,1.00,0.00,0.00,19,19,1.00,0.00,0.05,0.00,0.00,0.00,0.11,0.11,anomaly 0,tcp,http,SF,323,7355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2276,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,34,154,0.91,0.09,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,457,457,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,207,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,105,105,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,7,0.00,0.00,0.00,0.00,0.25,0.11,0.00,255,7,0.03,0.88,0.13,0.00,0.10,0.00,0.76,0.00,anomaly 0,tcp,finger,S0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,1,8,1.00,0.00,1.00,0.38,1.00,0.12,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,9,0.50,0.11,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,67,0.40,0.04,0.40,0.03,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,350,2716,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,304,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,150,143,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,1469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,19,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,16,0.10,0.02,0.10,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.07,0.14,0.00,0.00,0.00,0.74,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,16,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,47,0.18,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,89,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 232,tcp,telnet,SF,205,6096,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,26,0.10,0.05,0.00,0.00,0.51,0.00,0.02,0.15,normal 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,186,24,0.11,0.02,0.11,0.08,0.00,0.00,0.02,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,24,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,444,1,0.08,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,6,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,8,0.20,0.10,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,189,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,189,0.74,0.01,0.74,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,239,6,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,169,8147,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,9,20,1.00,0.00,0.11,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,18,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,10,0.19,0.24,0.19,0.20,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,197,2543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,852,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,119,0.47,0.03,0.47,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,8,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,209,809,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,normal 0,tcp,smtp,SF,602,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,115,0.49,0.06,0.01,0.02,0.01,0.02,0.01,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,508,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,smtp,SF,867,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,23,0.09,0.09,0.00,0.00,0.80,0.00,0.01,0.00,normal 2,tcp,smtp,SF,832,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,14,123,0.86,0.14,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,13,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,466,3177,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,2,255,1.00,0.00,0.50,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,131,1.00,0.00,1.00,0.36,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,18273,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,13,1.00,0.00,1.00,0.54,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,91,0.52,0.00,0.00,0.00,0.48,0.04,0.00,255,91,0.36,0.65,0.36,0.00,0.09,0.00,0.56,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.16,0.00,0.82,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.23,0.00,0.77,1.00,anomaly 0,tcp,ftp_data,SF,884,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,110,0.43,0.02,0.44,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,234,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,10,1.00,0.00,0.33,0.30,0.33,0.10,0.00,0.00,normal 0,tcp,ftp_data,SF,246,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,12,1.00,0.00,1.00,0.17,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,10,1.00,1.00,0.00,0.00,0.45,0.18,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,29,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,223,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,14,1.00,1.00,0.00,0.00,0.26,0.08,0.00,133,34,0.26,0.03,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,355,1091,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,30,0.12,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,11,0.00,0.00,0.00,0.00,0.33,0.09,0.00,255,56,0.22,0.31,0.73,0.00,0.10,0.00,0.17,0.00,anomaly 0,udp,domain_u,SF,17,17,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,other,SF,10044,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,1,0.08,0.00,0.00,0.00,0.08,0.25,0.00,219,1,0.00,0.03,0.54,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,156,145,0.84,0.03,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,181,1,0.01,0.94,0.96,0.00,0.96,1.00,0.00,0.00,anomaly 0,tcp,http,SF,368,771,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,27,231,1.00,0.00,0.04,0.21,0.00,0.00,0.11,0.79,normal 0,tcp,http,SF,171,409,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,277,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,14,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,51,255,1.00,0.00,0.02,0.13,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,233,1867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,164,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,215,1761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,205,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,39,0.49,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,7,1.00,0.00,0.50,0.57,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,12,1.00,1.00,0.00,0.00,0.25,0.08,0.00,255,39,0.15,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 11,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,1.00,1.00,0.00,0.00,0.25,0.75,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,213,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,1.00,1.00,0.00,0.00,1.00,0.00,0.00,82,140,0.49,0.02,0.01,0.01,0.98,0.29,0.00,0.00,anomaly 0,tcp,http,SF,228,7333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,20,1.00,1.00,0.00,0.00,0.40,0.08,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,3862,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,43,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.96,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,219,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,261,585,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,7,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,3745,4026,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,244,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,125,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,256,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,108,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,108,0.42,0.02,0.42,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,201,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,38,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,239,0.94,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,256,2851,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,211,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,216,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,166,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,13,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,36,0.14,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,3030,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,221,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 31905,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,171,831,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,15,0.00,0.00,1.00,1.00,0.09,0.08,0.00,255,15,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,2,0.10,0.15,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,271,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,31,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,2809,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,62,255,1.00,0.00,0.02,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,1,0.16,0.00,0.84,1.00,0.03,1.00,0.00,255,1,0.00,0.47,0.00,0.00,0.02,0.00,0.14,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,13,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,17,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,91,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,8557,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,95,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,55,0.77,0.09,0.77,0.05,0.00,0.02,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,12,1.00,1.00,0.00,0.00,0.11,0.08,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,741,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,49,0.00,0.00,0.00,0.00,1.00,0.00,0.06,41,255,1.00,0.00,0.02,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,231,670,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,17,1.00,1.00,0.00,0.00,0.23,0.05,0.00,155,40,0.25,0.03,0.02,0.05,0.99,0.93,0.00,0.00,anomaly 0,tcp,http,SF,224,403,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,49,49,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,341,604,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,34,0.17,0.06,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,89,0.49,0.08,0.49,0.02,0.00,0.01,0.00,0.00,normal 5046,tcp,ftp_data,SF,5133876,0,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,31,1.00,0.00,1.00,0.13,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4316,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,81,0.32,0.02,0.32,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,3,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,16,1.00,0.00,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,0.33,72,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,64,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,29,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,314,313,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,8,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,8,0.03,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 7,tcp,http,SF,264,28362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,42,0.12,0.05,0.12,0.05,0.00,0.02,0.00,0.00,normal 0,tcp,http,SF,226,7303,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 24,tcp,ftp,SF,230,767,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,7,225,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,14,0.08,0.06,0.01,0.14,0.04,0.14,0.00,0.00,normal 0,tcp,http,SF,335,14638,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,480,480,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,68,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.12,0.12,1.00,0.00,0.00,116,255,1.00,0.00,0.02,0.05,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,216,412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,198,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 2,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,389,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 4,tcp,smtp,SF,1722,438,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,33,0.13,0.06,0.00,0.00,0.00,0.00,0.84,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,10,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,209,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,85,0.45,0.09,0.45,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,2897,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,46,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 3487,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.70,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,319,318,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,3848,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,216,2526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,266,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,376,376,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 35,tcp,smtp,SF,768,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,240,152,0.63,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,163,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,62,1,0.02,0.16,0.02,0.00,0.77,1.00,0.02,0.00,anomaly 282,tcp,telnet,SF,344,8486,0,0,0,0,0,1,4,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,222,108,0.49,0.01,0.00,0.00,0.90,0.93,0.00,0.00,normal 0,tcp,http,SF,211,21556,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,244,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,244,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,6,1.00,1.00,0.00,0.00,0.22,0.15,0.00,255,47,0.18,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,284,13038,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,110,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,213,414,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,23,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,303,303,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.29,0.57,0.00,0.00,0.00,0.57,1.00,anomaly 0,tcp,http,SF,317,1039,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,12,1.00,1.00,0.00,0.00,0.30,0.12,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,120,0.30,0.04,0.30,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,2,1.00,1.00,0.00,0.00,0.04,0.09,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1022,331,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,231,178,0.70,0.02,0.00,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,1533,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,27,0.13,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,9238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,129,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 264,tcp,telnet,SF,174,4267,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,17,0.38,0.09,0.02,0.00,0.00,0.00,0.04,0.12,normal 0,tcp,pop_3,SF,38,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,4,0.03,0.06,0.01,0.50,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,22,1.00,1.00,0.00,0.00,0.18,0.04,0.00,255,22,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,2033,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,53,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,52,1,0.02,0.12,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,19,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,45,0.37,0.05,0.37,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,40,1.00,0.00,1.00,0.08,0.00,0.00,1.00,0.05,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,171,0.67,0.02,0.67,0.00,0.00,0.00,0.02,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.20,1.00,0.79,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.20,1.00,0.78,0.00,anomaly 0,udp,domain_u,SF,44,118,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,1.00,0.50,0.00,0.00,1.00,0.00,1.00,99,85,0.23,0.13,0.01,0.02,0.03,0.05,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.06,0.00,0.00,1.00,0.95,normal 0,tcp,pop_3,SF,52,1066,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,5,0.03,0.09,0.01,0.40,0.01,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,12,0.05,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,331,885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,209,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,301,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,45,49,0.00,0.00,0.00,0.00,1.00,0.00,0.06,72,219,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,530,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,184,0.00,0.00,0.00,0.00,0.99,0.01,0.00,74,41,0.55,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1489,475,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,30,0.13,0.02,0.00,0.00,0.00,0.00,0.82,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,5,0.00,0.00,0.00,0.00,0.17,0.07,0.00,255,15,0.06,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,281,1395,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,26,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,34,211,1.00,0.00,0.06,0.05,0.03,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5319,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,92,0.47,0.04,0.47,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,3076,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,168,1,0.01,0.94,0.95,0.00,0.95,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,7,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,7,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 38314,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,261,7816,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,86,96,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,24,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,26,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,5,0.00,0.00,0.00,0.00,0.28,0.17,0.00,255,5,0.02,0.85,0.16,0.00,0.16,0.00,0.68,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,13,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,295,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,26,1.00,0.00,0.04,0.00,0.00,0.00,0.08,0.08,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,193,161,0.83,0.01,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,313,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.34,0.33,0.00,0.00,0.00,0.33,1.00,anomaly 3,tcp,smtp,SF,1201,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,195,0.98,0.04,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,15,0.00,0.00,1.00,1.00,0.09,0.08,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,9178,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,79,0.39,0.05,0.39,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,5,0.03,0.02,0.03,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,4,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,27,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 465,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.58,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,6845,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,15,1.00,1.00,0.00,0.00,0.26,0.09,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,76,0.33,0.14,0.33,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,9720,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,30,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 39103,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 6,tcp,smtp,SF,1687,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,122,0.72,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,173,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,227,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,227,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,54,1,0.02,0.17,0.11,0.00,0.11,0.00,0.11,1.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9899,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.44,0.82,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,1976,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,143,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,727,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,222,126,0.50,0.03,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1711,487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,92,0.36,0.02,0.00,0.00,0.44,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,95,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,152,2,0.99,0.00,0.00,0.00,0.01,0.07,0.00,255,6,0.02,0.06,0.02,0.00,0.98,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,127,62,0.49,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1429,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,22,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,61,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,215,288,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.19,0.00,0.81,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.27,0.00,0.73,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,102,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,11,10,0.91,0.18,0.18,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,8,0.00,0.00,1.00,1.00,0.07,0.07,0.00,8,8,1.00,0.00,0.12,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,313,297,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,19,0.00,0.00,1.00,1.00,0.33,0.05,0.00,255,8,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,15,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 22,tcp,ftp,SF,287,903,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,7,0.11,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,19,1.00,1.00,0.00,0.00,0.21,0.07,0.00,198,19,0.10,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,18,1.00,1.00,0.00,0.00,0.24,0.05,0.00,255,55,0.22,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,2317,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,72,255,1.00,0.00,0.01,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,89,1,0.01,0.47,0.46,0.00,0.07,0.00,0.44,1.00,anomaly 0,tcp,ftp_data,SF,5929,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,101,0.44,0.03,0.44,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,20,1.00,1.00,0.00,0.00,0.26,0.05,0.00,255,60,0.24,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,12,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,1536,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,1528,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,322,4137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,11,1.00,1.00,0.00,0.00,0.09,0.08,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,363,1554,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,796,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,186,0.74,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 3,tcp,telnet,RSTO,0,15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.25,1.00,0.25,0.50,0.00,255,3,0.01,0.04,0.00,0.00,0.00,0.00,0.00,0.33,normal 0,tcp,http,SF,199,530,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,62,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,308,1608,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 11460,tcp,telnet,SF,3227,36853,0,0,0,1,0,1,0,0,0,0,17,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,13,0.10,0.04,0.01,0.00,0.02,0.23,0.00,0.00,normal 0,tcp,pm_dump,SF,44,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,1,0.01,0.00,0.91,0.00,0.01,1.00,0.00,255,1,0.00,0.44,0.00,0.00,0.00,0.00,0.40,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,616,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,93,0.36,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,189,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,10,1.00,1.00,0.00,0.00,0.45,0.09,0.00,30,37,0.33,0.07,0.03,0.05,1.00,0.27,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,361,777,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,13,1.00,1.00,0.00,0.00,0.39,0.06,0.00,75,17,0.17,0.05,0.05,0.12,0.97,0.76,0.00,0.00,anomaly 0,udp,domain_u,SF,42,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,213,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,17,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,1482,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,79,0.41,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,1271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,35,1,0.03,0.69,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,5,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 13,tcp,telnet,SF,105,1395,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,253,2,0.01,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,251,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,502,1,0.08,0.00,0.89,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,432,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,5,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,4,0.00,0.00,0.00,0.00,0.16,0.16,0.00,255,4,0.02,0.79,0.23,0.00,0.16,0.00,0.62,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,292,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,18,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 853,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.65,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,1428,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,1,1.00,1.00,0.00,0.00,0.03,0.17,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,2102,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,121,1.00,0.00,0.25,0.07,0.00,0.00,1.00,0.55,normal 0,udp,domain_u,SF,44,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,239,1423,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,103,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,12304,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,255,1.00,0.00,0.01,0.01,0.00,0.00,0.13,0.06,normal 27,tcp,ftp,SF,287,903,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,24,0.11,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,54,37,0.13,0.07,0.13,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,21778,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,38,255,1.00,0.00,0.03,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.87,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.05,0.00,0.00,1.00,0.99,normal 0,tcp,http,SF,213,3938,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.02,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,138,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,9,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,14,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,231,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,26,26,1.00,0.00,0.08,0.00,0.08,0.08,0.00,0.00,normal 0,tcp,http,SF,224,1645,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,178,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1192,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,125,0.49,0.03,0.00,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,306,304,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,58,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,1619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,1032,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,76,0.00,0.00,0.00,0.00,1.00,0.00,0.07,151,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,14,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,14,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 41541,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,240,2,0.01,0.25,0.50,0.00,0.00,0.00,0.50,1.00,anomaly 0,tcp,http,SF,207,19950,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.84,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,129,0.51,0.02,0.51,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,13,1.00,0.00,1.00,0.54,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,SF,10,39,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,4,0.02,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,1,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,133,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,182,0.71,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,259,115374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1136,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,21,159,0.71,0.19,0.05,0.01,0.00,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,87,0.48,0.04,0.48,0.00,0.01,0.00,0.35,0.00,anomaly 0,tcp,http,SF,218,12235,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,1506,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,6,0.67,0.33,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.51,0.50,0.00,0.00,0.00,0.50,1.00,anomaly 0,tcp,smtp,SF,1438,385,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,88,0.35,0.05,0.00,0.00,0.29,0.00,0.02,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,409,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,135,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,182,0.71,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,225,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,255,242,0.95,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,2,164,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,ftp,SF,1263,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,242,70,0.29,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,udp,domain_u,SF,44,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,63,58,0.92,0.03,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 6143,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.64,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,48,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,10,1.00,1.00,0.00,0.00,0.40,0.16,0.00,255,66,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,5969,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,213,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,976,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,10053,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,1199,376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,204,186,0.70,0.01,0.00,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,231,3,0.01,0.07,0.00,0.00,0.94,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,236,0.00,0.00,0.00,0.00,1.00,0.00,0.01,79,200,0.81,0.03,0.81,0.01,0.00,0.00,0.14,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,19,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,11,0.00,0.00,0.00,0.00,0.69,0.25,0.00,255,11,0.04,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,342,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,1287,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,15,0.00,0.00,0.00,0.00,0.75,0.20,0.00,255,15,0.06,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,155,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,52,1.00,0.00,0.02,0.00,0.02,0.02,0.02,0.02,anomaly 0,tcp,http,SF,226,430,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,26,0.00,0.00,0.00,0.00,1.00,0.00,0.12,89,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,13,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1790,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,137,0.55,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.50,0.50,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,244,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,219,0.86,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 5063,tcp,ftp_data,SF,5133876,0,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,12,1.00,0.00,1.00,0.17,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,15,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1228,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,36,144,0.78,0.14,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,8,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,6696,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,100,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,145,30262,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,7,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,7,0.03,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,220,619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,3989,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,2322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,156,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,255,1.00,0.00,0.50,0.14,0.00,0.00,1.00,0.78,normal 235,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,3,0.01,0.52,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,1671,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,248,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,11,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,20,255,1.00,0.00,0.05,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,25,28,1.00,0.00,0.04,0.07,0.00,0.07,1.00,0.93,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,155,9618,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4316,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,17,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,63,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,236,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,637,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,122,56,0.30,0.02,0.30,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,20,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,113,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,55,1.00,0.00,0.12,0.31,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,285,347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,155,3902,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.03,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,46,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,7,1.00,1.00,0.00,0.00,0.64,0.18,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,212,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.04,0.11,0.02,0.33,0.03,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,7,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10,tcp,smtp,SF,1576,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,47,0.18,0.67,0.00,0.00,0.66,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,14,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,304,9585,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,147,4843,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.33,0.00,0.00,1.00,0.00,0.67,23,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,306,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,237,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,1.00,1.00,0.00,0.00,0.33,1.00,0.00,255,41,0.16,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,10,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,15,1.00,1.00,0.00,0.00,0.25,0.07,0.00,255,55,0.22,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,794,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,99,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,2068,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,20,183,0.85,0.15,0.05,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,208,6428,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,9333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,211,976,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,25,255,1.00,0.00,0.04,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,235,32795,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,14,0.00,0.00,1.00,1.00,0.11,0.07,0.00,246,14,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,206,891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,513,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,47,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,12714,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,34,0.13,0.45,0.67,0.00,0.03,0.00,0.30,0.00,anomaly 0,icmp,ecr_i,SF,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,6134,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,17,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,137,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.25,1.00,0.00,0.38,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,6,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,394,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,6,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,148,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,5,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,186,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,215,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp,SF,1199,2447,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,248,76,0.31,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,210,748,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,9213,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,218,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,848,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,183,0.73,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,1,0.20,0.60,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,15,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,356,503,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,13,0.25,0.08,0.00,0.00,1.00,0.00,0.15,4,255,1.00,0.00,0.25,0.04,0.25,0.00,0.00,0.00,normal 0,tcp,http,SF,517,7131,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2061,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,148,146,0.71,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,59,8,0.14,0.15,0.02,0.00,0.76,1.00,0.02,0.00,anomaly 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,53,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,219,3692,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,51,51,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,85,0.33,0.04,0.33,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,auth,SF,10,38,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,8,0.04,0.05,0.01,0.25,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,191,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,14,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,3,1.00,1.00,0.00,0.00,0.16,0.21,0.00,255,63,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,191,3090,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,9204,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.11,0.00,0.00,0.21,0.51,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,62,0.30,0.01,0.30,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,356,356,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,312,1472,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.04,0.00,0.01,0.00,0.00,normal 151,tcp,http,SF,252,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,80,255,1.00,0.00,0.01,0.07,0.00,0.00,0.03,0.02,normal 9,tcp,smtp,SF,1044,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,122,0.75,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,179,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 26983,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,6,1.00,1.00,0.00,0.00,0.21,0.14,0.00,255,39,0.15,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,272,361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,94,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.01,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,223,24,0.11,0.04,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,12,1.00,1.00,0.00,0.00,0.38,0.09,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,19,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,74,0.29,0.04,0.29,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,10,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,2,0.00,0.00,0.00,0.00,0.02,0.05,0.00,255,2,0.01,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,9,1.00,1.00,0.00,0.00,0.53,0.12,0.00,255,69,0.27,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,4556,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,21,0.08,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,701,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,78,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,2649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,364,513,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,14496,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,18,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,245,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,453,1,0.05,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,finger,SF,10,223,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,10,0.04,0.03,0.01,0.20,0.01,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,3191,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,30,1.00,0.00,1.00,0.17,0.00,0.00,0.00,0.00,anomaly 32,tcp,ftp,SF,1502,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,48,0.29,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,879,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.04,0.42,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,340,3329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,45,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,200,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,13,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,31,0.12,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,3511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,207,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,5,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,952,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,235,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,26,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,381,692,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,251,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,48,48,1.00,0.00,0.02,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,20,1.00,1.00,0.00,0.00,0.31,0.06,0.00,255,65,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,52,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,175337,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,133,0.75,0.04,0.75,0.02,0.01,0.00,0.00,0.00,normal 13998,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,190,1954,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1333,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,167,0.95,0.04,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,9,0.04,0.02,0.04,0.00,0.00,0.00,0.83,0.00,normal 0,tcp,http,SF,344,1232,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,126,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1445,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,10,9,0.90,0.20,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,357,2333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,68,255,1.00,0.00,0.01,0.02,0.00,0.02,0.00,0.01,normal 0,tcp,http,SF,224,4414,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,139,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,72,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,36,0.14,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,ftp,SF,1228,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,5,0.05,0.06,0.01,0.00,0.02,0.00,0.07,0.00,anomaly 0,tcp,http,SF,217,23622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,33,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,20,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.21,1.00,0.79,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.17,1.00,0.83,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,104,1.00,0.00,1.00,0.03,0.00,0.00,1.00,0.02,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,230,0.90,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,17,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,278,5651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,114,1,0.01,0.91,0.93,0.00,0.93,1.00,0.00,0.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,6,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,11040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,24,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,76,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,201,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.49,0.92,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,12,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.80,0.80,1.00,0.00,0.00,23,176,1.00,0.00,0.04,0.22,0.00,0.00,0.83,0.98,normal 0,tcp,smtp,SF,1046,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,125,0.50,0.05,0.02,0.02,0.00,0.16,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,3211,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,564,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,148,0.56,0.03,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,252,2416,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1796,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,225,138,0.60,0.04,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,16,0.00,0.00,1.00,1.00,0.12,0.07,0.00,255,20,0.08,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,17,1.00,1.00,0.00,0.00,0.07,0.04,0.00,91,17,0.19,0.09,0.01,0.00,0.98,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,10,1.00,1.00,0.00,0.00,0.25,0.10,0.00,255,58,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,22,1.00,0.00,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,18,1.00,1.00,0.00,0.00,0.24,0.05,0.00,255,57,0.22,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,17,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,2288,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,123,227,1.00,0.00,0.01,0.01,0.00,0.00,0.03,0.02,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.50,0.50,1.00,0.00,0.00,22,169,1.00,0.00,0.05,0.20,0.00,0.00,0.82,0.98,normal 0,tcp,http,SF,305,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,193,0.96,0.01,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,smtp,SF,3394,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,211,152,0.58,0.15,0.00,0.01,0.03,0.01,0.00,0.00,normal 0,tcp,http,SF,248,6271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,179,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,5,1.00,0.00,1.00,0.60,0.00,0.00,0.00,0.00,anomaly 38,tcp,smtp,SF,1344,403,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,30,0.47,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1363,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.33,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,1,0.02,0.00,0.91,1.00,0.02,1.00,0.00,255,1,0.00,0.24,0.00,0.00,0.00,0.00,0.20,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,1379,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,9,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,14,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,413,309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,3,0.95,1.00,0.05,0.00,0.16,0.26,0.00,255,23,0.09,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,1899,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,10,255,1.00,0.00,0.10,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,243,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,158,1,0.01,0.39,0.38,0.00,0.00,0.00,0.37,1.00,anomaly 0,tcp,ftp_data,SF,175337,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,109,0.43,0.02,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,10,0.98,1.00,0.03,0.00,0.25,0.12,0.00,255,45,0.18,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,754,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,135,157,0.46,0.05,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,208,1248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,15,1.00,1.00,0.00,0.00,0.48,0.10,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,1,0.08,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.61,0.00,0.00,0.03,0.00,0.32,1.00,anomaly 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,19,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,37,0.15,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,15377,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,81,0.30,0.04,0.30,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,275,377,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 13805,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.69,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,792,393,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,173,0.74,0.05,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,10,1.00,1.00,0.00,0.00,0.25,0.10,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,244,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,udp,domain_u,SF,95,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,13,0.36,0.06,0.36,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,2168,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1239,400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,116,0.45,0.04,0.00,0.00,0.11,0.00,0.02,0.00,normal 0,tcp,http,SF,357,1529,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,3411,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,16225,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,62,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,62,0.24,0.02,0.24,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,2,0.00,0.00,0.00,0.00,0.18,0.18,0.00,140,2,0.01,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,509,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,147,0.58,0.17,0.58,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,371,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,156,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,218,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,218,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1340,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,136,105,0.65,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,256,34099,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 826,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.46,0.74,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,10,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 53,tcp,telnet,SF,2628,3860,0,0,0,3,0,1,1,1,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,sunrpc,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,8,1.00,1.00,0.00,0.00,0.24,0.12,0.00,255,67,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,985,390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,129,0.51,0.02,0.00,0.00,0.58,0.62,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,589,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,158,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,13,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,6,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,200,1449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,9,255,1.00,0.00,0.11,0.14,0.00,0.00,1.00,0.74,normal 0,tcp,http,SF,347,807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,209,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,43,1.00,0.00,1.00,0.09,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,155,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,8,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,262,1314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,1.00,0.25,1.00,0.00,0.75,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.12,0.00,normal 37847,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,205,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,165,9080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,242,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,1492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,208,106,0.42,0.03,0.42,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,normal 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,137,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,605,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,24,0.00,0.00,0.00,0.04,1.00,0.00,0.12,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,2,1.00,1.00,0.00,0.00,0.13,0.13,0.00,42,3,0.05,0.07,0.02,0.67,1.00,0.67,0.00,0.00,anomaly 0,tcp,http,SF,218,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,57,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,68,0.99,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,5,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,40,4,0.03,0.10,0.03,0.50,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,4,0.00,0.00,1.00,1.00,0.03,0.09,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,12,0.00,0.00,1.00,1.00,0.11,0.06,0.00,15,6,0.40,0.13,0.07,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,216,1,0.00,0.25,0.22,0.00,0.00,0.00,0.23,1.00,anomaly 0,tcp,http,SF,459,4557,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,1333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,250,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,18,0.00,0.00,1.00,1.00,0.47,0.08,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,326,1264,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,464,464,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,6,17,1.00,0.00,0.17,0.24,0.00,0.00,1.00,1.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,7,1.00,0.00,1.00,0.29,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,136,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,16692,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,36,0.00,0.00,0.00,0.00,1.00,0.00,0.06,10,10,1.00,0.00,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,952,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,25,1.00,1.00,0.00,0.00,0.35,0.07,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,5,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,319,319,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,28,0.11,0.24,0.11,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,237,987,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,193,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.02,0.02,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,ftp,SF,1250,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,75,0.30,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,225,18682,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,2523,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,55,0.00,0.00,0.00,0.00,1.00,0.00,0.11,30,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,174,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,24,0.12,0.03,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,14568,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,14,1.00,1.00,0.00,0.00,0.29,0.08,0.00,255,74,0.29,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,7848,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,13,0.00,0.00,0.00,0.00,1.00,0.00,0.31,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,19,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,35,0.14,0.56,0.14,0.00,0.56,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.24,0.24,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,26,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,18,0.00,0.00,1.00,1.00,0.16,0.05,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,1,0.10,0.00,0.90,1.00,0.01,1.00,0.00,255,1,0.00,0.56,0.00,0.00,0.03,0.00,0.27,1.00,anomaly 0,tcp,ftp_data,SF,0,544,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,59,0.33,0.19,0.05,0.03,0.00,0.00,0.05,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,13,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,24,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,42,1.00,0.00,1.00,0.29,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,8091,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,34,0.28,0.15,0.28,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,222,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,210,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,473,473,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,123,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,206,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,2547,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,48,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,265,39004,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,2,151,1.00,0.00,1.00,0.13,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,16,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.20,0.00,0.79,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.19,0.00,0.81,1.00,anomaly 31421,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,8,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,204,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1430,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,255,120,0.47,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2168,402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,18,0.07,0.02,0.00,0.00,0.93,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,94,0.49,0.03,0.49,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,68,0.31,0.03,0.31,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12165,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,27,0.19,0.03,0.19,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1442,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,252,99,0.38,0.02,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,250,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,154,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,25262,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,204,0.00,0.00,0.00,0.00,1.00,0.01,0.00,94,61,0.65,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,43,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 9,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,64,64,1.00,0.00,0.03,0.00,0.05,0.05,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,107,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,20,0.00,0.00,1.00,1.00,0.18,0.07,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 8,tcp,finger,SF,7,363,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,7,0.01,0.02,0.01,0.43,0.00,0.14,0.00,0.00,normal 4298,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.75,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,550,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,75,255,1.00,0.00,0.01,0.04,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,224,576,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,960,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,6,0.40,0.13,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.33,0.33,1.00,0.00,0.00,24,255,1.00,0.00,0.08,0.02,0.04,0.00,0.04,0.01,normal 10395,tcp,IRC,RSTR,2335,8163,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,1.00,0.50,1.00,0.00,162,16,0.10,0.01,0.01,0.00,0.00,0.00,0.07,0.75,normal 1,tcp,smtp,SF,1175,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,45,216,0.98,0.04,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7162,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,8,0.00,0.00,0.00,0.00,0.89,0.22,0.00,27,90,0.74,0.15,0.74,0.02,0.04,0.00,0.00,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,18,0.00,0.00,1.00,1.00,0.15,0.06,0.00,255,18,0.07,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,113,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,50,0.27,0.03,0.27,0.00,0.02,0.00,0.09,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,8,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,224,613,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,13,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,238,1.00,0.00,0.12,0.21,0.00,0.00,1.00,0.88,normal 0,udp,domain_u,SF,45,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,4046,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.03,0.00,0.02,0.11,0.03,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.10,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,7,1.00,1.00,0.00,0.00,0.26,0.15,0.00,255,46,0.18,0.05,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,3859,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,4,0.00,0.00,0.00,0.00,0.14,0.07,0.00,255,20,0.08,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,371,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,29,231,1.00,0.00,0.03,0.21,0.00,0.00,0.10,0.78,normal 0,tcp,http,SF,330,1047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,34,0.00,0.00,0.00,0.00,1.00,0.00,0.18,62,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,1372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,15,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,160,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 19,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,11,1.00,0.00,1.00,0.55,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,254,12834,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,826,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,155,0.72,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,356,11682,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,6,1.00,1.00,0.00,0.00,0.32,0.11,0.00,46,7,0.13,0.07,0.02,0.29,1.00,0.86,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,185,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1286,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,25,0.81,0.19,0.06,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,19,1.00,1.00,0.00,0.00,0.23,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,12,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 25701,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.65,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,211,389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,38,0.00,0.00,0.00,0.00,1.00,0.00,0.05,103,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,81,0.35,0.04,0.35,0.02,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,313,1270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,20,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,259,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,34,0.06,0.59,0.05,0.06,0.00,0.00,0.55,0.03,normal 3,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,1,0.04,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,0.89,0.00,0.00,0.04,0.00,0.82,1.00,anomaly 0,tcp,http,SF,227,1404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,http,RSTR,45260,4380,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.67,0.67,1.00,0.00,0.00,15,15,1.00,0.00,0.07,0.00,0.00,0.00,0.47,0.47,anomaly 0,tcp,smtp,SF,2571,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,135,0.53,0.03,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8017,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.62,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,9,1.00,1.00,0.00,0.00,0.41,0.18,0.00,255,62,0.24,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,9,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,2603,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,101,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,287,1509,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,185,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,264,413,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,1800,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,39,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,183,1730,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,18,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,1.00,1.00,0.00,0.00,0.33,0.33,0.00,248,62,0.25,0.02,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,1,0.03,0.00,0.90,1.00,0.01,0.99,0.00,255,1,0.00,0.72,0.00,0.00,0.02,0.00,0.64,1.00,anomaly 0,tcp,http,SF,275,782,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,1,0.01,0.00,0.94,1.00,0.01,1.00,0.00,244,1,0.00,0.52,0.00,0.00,0.00,0.00,0.47,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,109,0.43,0.01,0.43,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,69,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,69,0.27,0.04,0.27,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,SF,278,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,114,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,62,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,342,13466,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,13,255,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,9534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,6086,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,255,1.00,0.00,0.01,0.01,0.00,0.00,0.03,0.02,normal 0,tcp,http,SF,311,1726,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.10,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,207,27865,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,9,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,930,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,156,0.69,0.02,0.00,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,10,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,797,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,202,0.71,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,15,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,83,0.27,0.03,0.27,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,3448,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,1,0.02,0.09,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,49,1.00,0.00,1.00,0.14,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,14,0.99,1.00,0.00,0.00,0.13,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,225,2,0.01,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,8745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,217,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,1410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,19,1.00,1.00,0.00,0.00,0.07,0.04,0.00,143,19,0.13,0.07,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,13,1.00,1.00,0.00,0.00,0.25,0.08,0.00,135,36,0.24,0.03,0.02,0.06,0.99,0.92,0.00,0.00,anomaly 0,tcp,ftp_data,SF,74,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.07,0.02,0.00,0.92,0.00,0.00,0.00,normal 0,tcp,http,SF,325,1964,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.01,0.00,0.13,0.00,0.87,1.00,anomaly 0,tcp,http,SF,305,5280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,43,201,1.00,0.00,0.02,0.12,0.00,0.00,1.00,0.89,normal 0,tcp,http,SF,347,23151,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,9,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,19,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,19,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,51,0.22,0.02,0.22,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,33,0.11,0.04,0.11,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,4,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.11,0.03,normal 30,tcp,telnet,SF,205,3978,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,3,0.05,0.32,0.02,0.00,0.02,0.33,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,22841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,44,0.00,0.00,0.00,0.00,1.00,0.00,0.09,175,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 2712,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,15,1.00,1.00,0.00,0.00,0.36,0.12,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,105,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,105,0.41,0.02,0.41,0.00,0.00,0.00,0.00,0.00,anomaly 2,tcp,ftp_data,S3,2194620,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,106,33,0.25,0.07,0.25,0.06,0.01,0.03,0.00,0.00,normal 0,tcp,http,SF,291,5352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,137,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,3243,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,53,0.00,0.00,0.00,0.00,1.00,0.00,0.06,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,5,1.00,1.00,0.00,0.00,0.62,0.38,0.00,255,56,0.22,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,182,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,201,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,28,0.13,0.03,0.13,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,4,255,1.00,0.00,0.25,0.05,0.00,0.00,1.00,0.84,normal 0,tcp,http,SF,198,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.06,0.00,0.00,1.00,0.00,0.28,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,864,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,200,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,3811,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,28,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1339,322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,114,0.45,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,48,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,88,0.35,0.04,0.35,0.00,0.07,0.00,0.02,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,237,1.00,0.00,1.00,0.19,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,1512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,13,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,213,8487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,1081,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,34237,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.02,0.00,0.01,0.17,0.12,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,19,0.99,1.00,0.00,0.00,0.16,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,363,2801,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,130,255,1.00,0.00,0.01,0.02,0.00,0.00,0.02,0.03,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,210,25,0.11,0.02,0.11,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 6,tcp,telnet,SF,68,219,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,1,0.03,0.10,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7940,0,0,0,0,0,0,1,0,0,0,0,2,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.51,0.04,0.00,0.00,0.00,0.00,0.00,normal 10059,tcp,telnet,SF,87,2059,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,101,0.40,0.01,0.00,0.00,0.73,0.85,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,finger,SF,6,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,38,0.15,0.02,0.00,0.00,0.45,0.79,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,160,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,5606,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,15,255,1.00,0.00,0.07,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,2890,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,47,0.68,0.11,0.68,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,375,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,23,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,1,151,1.00,0.00,1.00,0.10,0.00,0.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,98,0.39,0.02,0.39,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,244,10,0.04,0.07,0.00,0.00,0.94,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,1600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.03,0.02,0.00,0.00,0.00,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,136,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,18,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,323,322,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,770,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,16,126,0.56,0.25,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,1784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.04,0.03,0.01,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,12,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 500,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.65,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1530,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.61,0.82,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12324,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,64,0.27,0.04,0.27,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,77,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,77,0.30,0.04,0.30,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,SF,226,1404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,314,314,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,7,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,7,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,315,1566,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,40,93,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,70,87,0.74,0.03,0.74,0.02,0.01,0.00,0.20,0.00,normal 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 15,tcp,smtp,SF,1376,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,24,212,0.96,0.08,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,16,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,66,0.26,0.04,0.26,0.00,0.16,0.00,0.02,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.08,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,248,3040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,7,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,4286,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,32,0.31,0.04,0.31,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,9311,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,15,0.58,0.08,0.58,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,1183,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,2099,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,8,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,23,0.09,0.18,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,223,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,20,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,300,356,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,1681,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,35,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,4073,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,18,1.00,0.00,0.06,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,76,0.30,0.02,0.13,0.00,0.64,0.55,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 16553,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.63,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4753,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.02,0.16,0.00,0.27,0.31,0.00,0.00,normal 2,tcp,smtp,SF,3450,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,98,126,0.52,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,394,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,12,1.00,1.00,0.00,0.00,0.29,0.10,0.00,255,70,0.27,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,895,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,119,0.70,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,5,1.00,1.00,0.00,0.00,0.10,0.12,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5385,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.64,0.97,0.00,0.00,0.00,0.00,0.00,normal 9741,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.13,0.00,0.00,0.50,0.65,normal 0,tcp,ftp_data,SF,6932,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,125,101,0.26,0.02,0.26,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,35,95,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,212,0.56,0.05,0.42,0.01,0.00,0.00,0.25,0.00,normal 0,tcp,http,SF,278,2092,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,24,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,245,555,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,97,0.23,0.02,0.23,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,9,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,97,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,97,0.38,0.61,0.38,0.00,0.00,0.00,0.49,0.00,anomaly 0,tcp,http,SF,415,704,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 1,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,78,0.27,0.07,0.27,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,smtp,SF,977,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,177,0.69,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,3,1.00,1.00,0.00,0.00,0.33,0.33,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,16,0.06,0.02,0.06,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,212,6806,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,370,837,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,227,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,9,0.00,0.00,0.00,0.00,0.20,0.09,0.00,255,59,0.23,0.20,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,309,2238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,164,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1111,331,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,129,0.61,0.02,0.00,0.00,0.00,0.00,0.05,0.08,normal 0,tcp,smtp,SF,1556,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,32,0.13,0.02,0.00,0.00,0.00,0.00,0.86,0.00,normal 0,tcp,smtp,SF,652,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,183,0.98,0.04,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,14,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,196,8821,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,85,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,317,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,493,1,0.08,0.00,0.89,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,http,SF,335,414,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,12,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,700,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,128,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,680,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,128,188,0.75,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,9,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,11,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,134,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,556,336,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,146,0.96,0.04,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,52,0.20,0.02,0.20,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,13,1.00,0.46,0.00,0.00,0.03,0.07,0.15,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,288,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,29,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,125,125,1.00,0.00,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,266,461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,100,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,275,468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,1.00,0.01,0.50,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1504,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,104,0.63,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,873,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 30337,tcp,kshell,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.66,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,1,0.00,0.00,1.00,1.00,0.04,1.00,0.00,255,1,0.00,0.43,0.00,0.00,0.00,0.00,0.11,1.00,anomaly 0,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,12,1.00,0.00,0.08,0.00,0.00,0.00,0.08,0.08,normal 0,tcp,http,SF,300,1473,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,29,0.00,0.00,0.00,0.00,1.00,0.00,0.10,68,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,12,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,761,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,125,0.74,0.11,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,68,0.23,0.13,0.23,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,22841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,14,0.00,0.00,0.00,0.00,0.93,0.13,0.00,255,14,0.05,0.57,0.05,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,http,SF,192,1630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,2183,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,159,0.00,0.00,0.00,0.00,0.99,0.01,0.02,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,2,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,2,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,5,0.04,0.07,0.01,0.40,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,3541,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,81,255,1.00,0.00,0.01,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,235,2710,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,38,0.20,0.10,0.20,0.05,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,199,67,0.34,0.02,0.34,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,380,1398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1750,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,69,0.00,0.00,0.00,0.00,1.00,0.00,0.07,163,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,226,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,4,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,287,8867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,1139,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,225,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,211,0.83,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,9338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.11,0.00,0.00,1.00,0.00,0.33,77,255,1.00,0.00,0.01,0.06,0.04,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.95,1.00,0.05,1.00,0.00,0.10,2,224,1.00,0.00,0.50,0.08,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,232,765,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,75,95,1.00,0.00,0.01,0.04,0.03,0.02,0.00,0.00,normal 0,tcp,smtp,SF,2645,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,99,0.39,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,270,15626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,20,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,209,1093,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,125,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,1226,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,252,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 39,tcp,ftp,SF,334,1063,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,234,34,0.15,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 3296,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.81,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,55,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,55,0.22,0.01,0.22,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,333,4296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,601,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,18,1.00,0.00,0.14,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,35,0.14,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,976,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,965,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,78,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,10,0.00,0.00,1.00,1.00,0.07,0.08,0.00,255,10,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,16,0.99,1.00,0.00,0.00,0.08,0.07,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,61,0.02,0.05,0.02,0.03,0.00,0.28,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,25,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,761,345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,76,0.40,0.52,0.01,0.03,0.01,0.01,0.50,0.03,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,25672,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,208,8743,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,348,2870,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,37,53,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,269,958,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,12,0.00,0.00,1.00,1.00,0.15,0.06,0.00,255,12,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,121,1.00,0.00,0.25,0.21,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,44,118,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,203,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,12,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,24,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.07,0.00,0.00,1.00,0.40,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,131,1.00,0.00,1.00,0.37,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,12,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,2,0.00,0.00,0.00,0.00,0.25,0.25,0.00,255,246,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1954,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,133,184,0.77,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1743,277,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,151,0.59,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,227,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,189,3133,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,11,1.00,1.00,0.00,0.00,0.16,0.09,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,6163,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.02,0.02,0.00,0.16,0.09,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,19,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,1,0.05,0.00,0.93,1.00,0.01,1.00,0.00,255,1,0.00,0.78,0.00,0.00,0.03,0.00,0.56,1.00,anomaly 0,tcp,http,SF,222,3250,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,24,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,108,13614,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,2,0.01,0.07,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,109,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,233,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,189,0.74,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,1993,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,278,428,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,172,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,17,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,271,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,20,255,1.00,0.00,0.05,0.08,0.05,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,75,0.11,0.09,0.11,0.03,0.00,0.00,0.02,0.00,normal 0,tcp,smtp,SF,756,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,108,0.56,0.06,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,684,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,26,0.00,0.00,0.00,0.00,1.00,0.00,0.23,11,255,1.00,0.00,0.09,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,112,14,0.12,0.09,0.01,0.00,0.88,1.00,0.01,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,20,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,smtp,SF,783,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,84,105,0.44,0.08,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2290,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,118,0.62,0.03,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,281,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 20,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 4224,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.69,0.97,0.00,0.00,0.00,0.00,0.00,normal 694,tcp,telnet,SF,591,19144,0,0,0,0,0,1,6,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,106,0.50,0.01,0.00,0.00,0.93,0.94,0.00,0.00,normal 0,tcp,http,SF,218,1068,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,95,255,1.00,0.00,0.01,0.08,0.00,0.00,0.00,0.00,normal 11,tcp,smtp,SF,13180,1361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,148,204,0.68,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,71,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,40,0.16,0.05,0.16,0.00,0.42,0.00,0.02,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 36,udp,domain_u,SF,92,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,50,26,0.52,0.06,0.52,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1111,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,240,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,249,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,47,1.00,0.00,1.00,0.13,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,230,857,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,255,1.00,0.00,0.02,0.01,0.00,0.00,0.09,0.05,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,1.00,0.29,normal 0,tcp,pop_3,SF,52,1163,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,6341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.07,0.00,0.00,0.00,0.00,normal 31118,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.79,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,14,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,26,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,14299,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,190,1925,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,17,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,142,16627,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,12,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,1,0.00,0.00,1.00,1.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,203,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,658,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,2528,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,74,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,8,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,6,0.01,0.02,0.01,0.33,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,47,0.18,0.04,0.18,0.00,0.04,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,362,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,213,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,277,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,935,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,2345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,204,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,28,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,144,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,174,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S1,1191,3023,0,0,0,0,0,1,0,0,0,0,4,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,137,15,0.11,0.04,0.01,0.00,0.03,0.27,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,1,0.00,0.00,1.00,1.00,0.08,0.54,0.00,255,1,0.00,0.04,0.05,0.00,0.00,0.00,0.85,1.00,anomaly 0,tcp,http,SF,321,18619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,261,240,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,1053,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,95,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,202,1411,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.03,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.17,0.17,1.00,0.00,0.00,12,12,1.00,0.00,0.08,0.00,0.00,0.00,0.08,0.08,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,11,0.00,0.00,0.00,0.00,0.34,0.09,0.00,255,11,0.04,0.86,0.15,0.00,0.10,0.00,0.75,0.00,anomaly 63,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,4,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,11,98,1.00,0.00,0.09,0.24,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,315,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,977,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,161,0.78,0.03,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,283,37266,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,18,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,18,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,205,3303,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,58,255,1.00,0.00,0.02,0.03,0.02,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,10,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,5,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 40025,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.49,0.97,0.00,0.00,0.00,0.97,1.00,anomaly 0,tcp,http,SF,225,758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,41,0.16,0.51,0.16,0.00,0.51,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,232,232,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 13535,tcp,telnet,SF,10606,17797,0,0,0,0,0,1,4,0,0,2,40,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,12,0.05,0.06,0.00,0.00,0.76,0.08,0.00,0.00,normal 2705,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,2448,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,1,1.00,1.00,0.00,0.00,0.02,0.13,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,udp,domain_u,SF,95,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,18,0.60,0.07,0.60,0.00,0.00,0.00,0.00,0.00,normal 6,tcp,telnet,SF,122,1488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,20,0.23,0.04,0.01,0.10,0.00,0.05,0.00,0.00,normal 0,tcp,http,SF,255,5465,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,27,0.11,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,17,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,2,0.00,0.00,1.00,1.00,0.04,0.54,0.00,222,2,0.01,0.13,0.23,0.00,0.01,0.00,0.45,1.00,anomaly 22336,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,2630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,634,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,207,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.36,0.30,0.00,0.23,0.00,0.31,1.00,anomaly 0,udp,domain_u,SF,44,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,858,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,18,175,0.89,0.17,0.06,0.01,0.06,0.02,0.00,0.00,normal 0,tcp,http,SF,350,590,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,255,1.00,0.00,0.33,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,16,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,450,450,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,8,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 3,tcp,smtp,SF,1290,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,197,145,0.58,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,1,0.00,0.00,1.00,1.00,0.03,0.57,0.00,255,1,0.00,0.09,0.14,0.00,0.00,0.00,0.85,1.00,anomaly 0,tcp,http,SF,206,343,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.01,0.00,0.01,0.00,0.00,normal 2,tcp,smtp,SF,1240,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,41,27,0.66,0.05,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,201,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,14,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,350,3098,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,47,0.00,0.00,0.00,0.00,1.00,0.00,0.09,108,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.01,normal 1700,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,73,2,0.03,0.73,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,810,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,105,143,0.49,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,423,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,554,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,14,255,1.00,0.00,0.07,0.06,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,244,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,209,1.00,0.00,0.20,0.20,0.00,0.00,1.00,0.88,normal 0,tcp,http,SF,280,491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1578,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,90,0.94,0.03,0.01,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,176,944,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,34,0.00,0.00,0.00,0.00,1.00,0.00,0.12,48,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,208,1,0.00,0.07,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 2,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,437,2,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 33,tcp,telnet,SF,127,12525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,2,0.01,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,186,0.73,0.01,0.73,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,252,168,0.67,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,451,451,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,14,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,316,6367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,25,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,200,1695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,270,57,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,1535,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,7,221,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,234,10,0.04,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,14,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,207,5443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,18,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,312,882,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,95,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,245,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,201,0.79,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 27,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,133,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,4,0.00,0.00,0.00,0.00,0.57,0.29,0.00,255,4,0.02,0.97,0.04,0.00,0.03,0.00,0.93,0.00,anomaly 1,tcp,smtp,SF,648,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,58,239,0.97,0.03,0.02,0.01,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1354,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,80,0.59,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,25,0.00,0.00,0.00,0.00,1.00,0.00,0.24,27,255,1.00,0.00,0.04,0.04,0.00,0.01,0.00,0.01,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,241,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,15,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,932,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,112,170,0.79,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,9,255,1.00,0.00,0.11,0.06,0.00,0.00,0.00,0.00,normal 1,tcp,other,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,419,1,0.05,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,10,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,268,4740,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 7790,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.86,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,1,0.01,0.00,0.91,1.00,0.01,1.00,0.00,255,1,0.00,0.47,0.00,0.00,0.00,0.00,0.42,1.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,6,1.00,1.00,0.00,0.00,0.11,0.09,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,15416,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.04,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,1588,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,595,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,1535,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 10,tcp,smtp,SF,836,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,122,0.39,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,10,1.00,1.00,0.00,0.00,0.18,0.07,0.00,255,50,0.20,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,161,53151,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,132,0.00,0.00,0.00,0.00,1.00,0.00,0.02,250,185,0.74,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,7,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,87,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,206,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,134,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,43,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,225,1472,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,108,1.00,0.00,0.01,0.04,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,82,11,0.13,0.07,0.13,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,221,1,0.00,0.24,0.46,0.00,0.00,0.00,0.46,1.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,101,100,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,20,1.00,1.00,0.00,0.00,0.22,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,3810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,1242,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,23,1.00,0.00,0.04,0.00,0.13,0.13,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,5,1.00,1.00,0.00,0.00,0.23,0.18,0.00,255,48,0.19,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,250,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,213,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,8844,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,71,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,15,0.00,0.00,1.00,1.00,0.05,0.05,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,323,2,0.00,0.00,1.00,1.00,0.01,0.50,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,6359,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,156,1.00,0.00,0.03,0.07,0.03,0.01,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,83,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,189,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,231,0.91,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,2101,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,1509,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,180,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,151,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,10,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,20,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,220,1228,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,48,0.00,0.00,0.00,0.00,1.00,0.00,0.04,57,57,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,2543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,84,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,11,0.11,0.14,0.04,0.27,0.11,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,46,1,0.02,1.00,0.02,0.00,0.00,0.00,0.91,1.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1363,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.01,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,14148,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,248,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,1282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,2654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,170,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,20,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,3,1.00,1.00,0.00,0.00,0.38,0.38,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,7,1.00,0.00,1.00,0.57,0.00,0.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,10,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,1032,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,55,154,0.55,0.07,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,297,0.00,0.00,0.00,0.00,1.00,0.01,0.01,222,183,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,102,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,105,404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,94,0.38,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,12,0.00,0.00,1.00,1.00,0.11,0.08,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,1,0.06,0.00,0.00,0.00,0.06,0.28,0.00,194,1,0.01,0.08,0.24,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,198,3,0.02,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,116,72,0.62,0.02,0.62,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,11,236,1.00,0.00,0.09,0.01,0.00,0.00,1.00,0.07,normal 0,tcp,http,SF,293,2400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,147,0.00,0.00,0.00,0.00,0.98,0.03,0.02,255,190,0.75,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,3,0.00,0.00,0.00,0.00,0.60,0.60,0.00,255,3,0.01,0.36,0.84,0.00,0.00,0.00,0.16,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,679,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,192,0.77,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,265,3773,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,41,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,18,0.00,0.00,1.00,1.00,0.18,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,234,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.19,0.00,0.00,1.00,0.93,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,88,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,4868,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1013,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,84,56,0.67,0.06,0.01,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,286,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,14,0.33,0.14,0.00,0.07,1.00,0.00,0.36,60,60,1.00,0.00,0.02,0.00,0.02,0.02,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,2033,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,207,1,0.00,0.95,0.96,0.00,0.96,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.02,0.02,0.00,0.00,0.00,0.00,0.00,normal 9094,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.54,0.84,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,163,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 6892,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.54,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,1214,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,131,1.00,0.00,1.00,0.20,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,81,0.32,0.02,0.32,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,17,1.00,0.59,0.00,0.00,0.04,0.07,0.12,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,482,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,188,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,49,255,1.00,0.00,0.02,0.03,0.00,0.02,0.00,0.02,normal 0,tcp,http,SF,283,4770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,47,0.00,0.00,0.00,0.00,1.00,0.00,0.04,49,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,8422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,910,2720,0,0,0,19,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,66,0.31,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,13,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,642,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,185,0.80,0.10,0.03,0.03,0.00,0.00,0.00,0.00,normal 7,tcp,smtp,SF,1837,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,51,0.75,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,266,1365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,35,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1490,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,3,1.00,0.00,0.33,0.00,0.00,0.00,0.00,0.00,normal 3,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,191,156,0.82,0.02,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,5,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,73,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.33,0.33,1.00,0.00,0.00,96,96,1.00,0.00,0.01,0.00,0.00,0.00,0.16,0.16,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,1,0.03,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,udp,domain_u,SF,46,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,74,0.29,0.20,0.29,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,16,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,1,1.00,1.00,0.00,0.00,0.03,0.10,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,56,4,0.07,0.11,0.07,0.00,0.04,0.00,0.05,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,11,1.00,1.00,0.00,0.00,0.92,0.17,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 21223,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.65,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,10,139,0.40,0.20,0.20,0.01,0.10,0.02,0.00,0.00,normal 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,60,28,0.47,0.08,0.47,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,smtp,SF,2201,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,135,0.87,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,160,193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1190,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,73,0.86,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,22,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,748,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,156,0.74,0.11,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,18,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,1,0.00,0.00,0.00,0.00,0.08,0.75,0.00,255,1,0.00,0.32,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,230,7745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,69,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.01,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,325,11905,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,36,254,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,174,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,167,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,687,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.06,0.06,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,256,861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,2941,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,66,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,101,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,82,1.00,0.00,0.01,0.00,0.00,0.00,0.17,0.17,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.73,0.73,1.00,0.00,0.00,33,113,1.00,0.00,0.03,0.18,0.00,0.00,0.88,0.96,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,62,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,159,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,215,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,74,0.25,0.06,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,319,3112,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,211,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,38,3,0.08,0.18,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,12,0.05,0.02,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,109,5,0.05,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,1,0.06,0.00,0.00,0.00,0.06,0.41,0.00,86,1,0.01,0.10,0.27,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,298,702,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,23,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,13,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,26,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,175337,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,199,108,0.54,0.03,0.54,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,90,0.98,0.03,0.98,0.17,0.00,0.00,0.00,0.00,normal 21023,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.63,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,47,283,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,234,135,0.58,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,1204,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,178,213,0.90,0.01,0.90,0.01,0.00,0.00,0.05,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.07,0.00,0.00,1.00,0.49,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,32,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,3,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,10351,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.17,0.00,0.83,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.18,0.00,0.82,1.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3949,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.82,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,27000,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,37,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,261,3834,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,360,1738,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,318,1861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,28,1.00,0.39,0.00,0.00,0.05,0.06,0.11,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,57,57,1.00,0.00,0.02,0.00,0.00,0.00,0.58,0.58,normal 294,tcp,telnet,SF,237,1885,0,0,0,0,0,1,6,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,35,0.16,0.03,0.00,0.00,0.00,0.03,0.01,0.06,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,267,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,0,20595,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,183,125,0.55,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,15,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,207,1588,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,116,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,12,1.00,1.00,0.00,0.00,0.11,0.06,0.00,153,9,0.06,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,159,1822,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,52,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,23,1.00,1.00,0.00,0.00,0.77,0.10,0.00,255,23,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,18,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,461,461,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,21,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,209,9158,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,120,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTR,47612,2920,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.50,0.67,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,25,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,85,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,265,1516,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,53,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,203,0.00,0.00,0.00,0.00,1.00,0.01,0.00,93,60,0.65,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,1,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,340,698,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,30,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2630,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.82,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 4,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,12,0.86,0.14,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,24,0.00,0.00,0.00,0.04,1.00,0.00,0.08,118,109,0.92,0.02,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,206,49163,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,1.00,1.00,0.00,0.00,0.33,1.00,0.00,255,61,0.24,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,108,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,203,0.74,0.03,0.74,0.01,0.02,0.00,0.20,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,24,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.76,0.75,0.00,0.00,0.00,0.75,1.00,anomaly 0,tcp,http,SF,196,5670,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,44,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,44,0.17,0.01,0.17,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,155,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,11262,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,13,0.00,0.00,0.00,0.08,1.00,0.00,0.23,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,308,960,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,16,41,0.12,0.25,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.62,0.62,1.00,0.00,0.00,48,251,1.00,0.00,0.02,0.18,0.00,0.00,0.90,0.98,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,54,1,0.02,1.00,0.02,0.00,0.00,0.00,0.94,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,9,1.00,1.00,0.00,0.00,0.31,0.07,0.00,71,13,0.13,0.06,0.06,0.15,0.97,0.69,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,221,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,405,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,ftp_data,SF,1470,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,144,0.56,0.02,0.56,0.00,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,46,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,259,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 4115,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.72,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,535,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,218,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.98,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1372,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,97,140,0.51,0.06,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,19,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,148,6281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,1.00,1.00,0.00,0.00,1.00,0.00,0.00,55,35,0.64,0.04,0.02,0.00,0.96,0.94,0.00,0.00,anomaly 5042,tcp,ftp_data,SF,0,5129964,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,64,0.25,0.02,0.00,0.00,0.72,0.83,0.00,0.00,normal 0,tcp,other,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,1,0.14,0.00,0.00,0.00,0.05,0.67,0.00,130,1,0.01,0.23,0.33,0.00,0.05,0.00,0.00,0.00,normal 0,tcp,http,SF,251,761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,213,0.00,0.00,0.00,0.00,1.00,0.00,0.02,203,196,0.80,0.01,0.72,0.01,0.00,0.00,0.07,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 28,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,0.33,0.67,0.33,82,79,0.96,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,1035,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,185,255,1.00,0.00,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,137,0.54,0.04,0.54,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.05,0.00,0.00,0.00,0.00,normal 2,tcp,ftp,SF,1221,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,139,0.55,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,183,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,240,0.94,0.02,0.00,0.00,0.00,0.00,0.03,0.03,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,5,0.00,0.00,0.00,0.00,0.62,0.25,0.00,255,5,0.02,0.96,0.04,0.00,0.03,0.00,0.93,0.00,anomaly 0,tcp,http,SF,251,10880,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,158,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,other,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,1,0.05,0.00,0.00,0.00,0.05,0.30,0.00,202,1,0.00,0.10,0.40,0.00,0.02,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,223,211,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,14,1.00,1.00,0.00,0.00,0.26,0.07,0.00,134,52,0.25,0.03,0.01,0.04,1.00,0.65,0.00,0.00,anomaly 0,tcp,http,SF,224,1265,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1214,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,83,0.39,0.03,0.39,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,153,12,0.04,0.04,0.04,0.17,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,5260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,241,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,7195,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,83,16,0.19,0.13,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,254,1.00,0.00,0.50,0.16,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,205,1335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,16,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,16,0.06,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,sunrpc,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,1,0.02,0.00,0.89,1.00,0.02,1.00,0.00,255,1,0.00,0.21,0.00,0.00,0.00,0.00,0.17,1.00,anomaly 0,tcp,ftp_data,SF,554,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,27,0.09,0.06,0.13,0.07,0.02,0.07,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,348,348,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 41,tcp,imap4,SF,1334,162,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,5,1.00,0.00,0.20,0.00,0.40,0.40,0.00,0.00,anomaly 0,tcp,http,SF,295,2996,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,294,832,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,33,2,0.03,1.00,0.03,1.00,0.00,0.00,0.91,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.02,0.02,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,209,0.82,0.03,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,240,2043,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,256,6094,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,9,255,1.00,0.00,0.11,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,4,1.00,1.00,0.00,0.00,0.33,0.33,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,88,0.90,0.05,0.90,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,77,0.30,0.01,0.30,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,190,0.75,0.01,0.75,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,353,2251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.20,0.37,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,82,0.83,0.33,0.83,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,249,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,http,SF,179,7931,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 10,tcp,pop_3,SF,2326,231052,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.25,1.00,0.25,0.50,0.00,255,2,0.01,0.03,0.00,0.00,0.00,0.00,0.00,0.50,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4129,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.72,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1364,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,145,0.50,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 12041,tcp,IRC,RSTR,1318,9761,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.33,1.00,0.33,0.67,0.00,27,6,0.22,0.07,0.04,0.00,0.00,0.00,0.15,0.67,normal 0,tcp,http,SF,283,1146,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,20,2,0.05,1.00,0.05,1.00,0.00,0.00,0.85,1.00,anomaly 829,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.83,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,2,0.81,1.00,0.19,0.00,0.05,0.40,0.00,255,2,0.01,0.07,0.16,0.00,0.13,1.00,0.03,0.00,anomaly 0,tcp,http,SF,309,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,49,255,1.00,0.00,0.02,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,7233,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,103,0.37,0.09,0.37,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,4,1.00,1.00,0.00,0.00,0.31,0.31,0.00,255,42,0.16,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,2586,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.14,0.00,0.00,1.00,0.00,0.29,103,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,1948,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.06,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,247,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,24,1.00,1.00,0.00,0.00,0.20,0.04,0.00,255,24,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,41,1.00,0.00,0.02,0.00,0.02,0.02,0.02,0.02,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,37,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7280,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,69,1.00,0.00,1.00,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,315,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,3,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,11,1.00,0.00,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,290,0.00,0.00,0.00,0.00,1.00,0.01,0.01,215,176,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,273,1493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,170,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,9,1.00,0.89,0.00,0.00,0.04,0.07,0.22,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,58,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1228,279,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,64,45,0.61,0.08,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,140,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,185,0.73,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,176,11008,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,3118,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,426,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,14,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,487,487,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,128,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.60,0.00,0.00,0.00,0.00,0.55,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,328,10713,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,399,399,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,177,36,0.20,0.03,0.01,0.00,0.00,0.00,0.04,0.08,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,232,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,233,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,375,5566,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,20,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,16,1.00,1.00,0.00,0.00,0.16,0.06,0.00,154,16,0.10,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,OTH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,1,0.01,0.74,0.74,0.00,0.03,0.00,0.63,0.00,anomaly 0,udp,domain_u,SF,130,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,230,0.00,0.00,0.00,0.00,1.00,0.01,0.00,120,87,0.73,0.02,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,447,4058,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,25,1.00,0.00,1.00,0.56,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,217,2450,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,19,0.00,0.00,0.00,0.00,1.00,0.00,0.26,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,11944,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,1,0.02,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.75,0.00,0.00,0.01,0.00,0.69,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,anomaly 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,151,38,0.12,0.14,0.12,0.05,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,306,5080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,1820,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,85,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,79,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,107,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,20,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,251,13491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.14,0.00,0.00,0.27,0.93,normal 0,tcp,http,SF,187,4929,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,21,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,205,0.80,0.01,0.80,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,1,0.08,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.87,1.00,anomaly 0,tcp,http,SF,242,5215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,1307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,20,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,1059,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,17,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,999,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,19,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,190,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1289,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,83,0.33,0.05,0.00,0.00,0.32,0.00,0.02,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,32,0.13,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,IRC,SF,86,128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,2,0.67,0.67,0.33,0.00,0.33,0.50,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,2,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,1432,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,7590,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,881,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,27,179,0.93,0.07,0.04,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,12,1.00,1.00,0.00,0.00,0.31,0.10,0.00,201,52,0.26,0.02,0.02,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,8,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,288,1680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,373,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,8,69,0.88,0.25,0.88,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,13,1.00,1.00,0.00,0.00,0.10,0.06,0.00,94,9,0.10,0.12,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,46,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,10,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.50,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.05,0.05,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,5,1.00,1.00,0.00,0.00,0.24,0.19,0.00,255,52,0.20,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,63,0.00,0.00,0.02,0.00,0.98,0.03,0.00,255,63,0.25,0.02,0.25,0.00,0.00,0.00,0.57,0.00,anomaly 11854,tcp,telnet,SF,80,929,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,101,16,0.16,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,313,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,86,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,224,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,15,1.00,1.00,0.00,0.00,0.15,0.08,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8695,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.72,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,4209,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,179,194,0.77,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,40,40,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,235,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urh_i,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,4,0.06,0.07,0.06,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,1463,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,200,120,0.41,0.04,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,5,0.42,0.25,0.42,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,1813,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,17,1.00,1.00,0.00,0.00,0.34,0.08,0.00,255,59,0.23,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,34,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 12202,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.89,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,35,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,16,0.06,0.06,0.06,0.00,0.62,0.00,0.03,0.00,normal 0,udp,domain_u,SF,44,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,134,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,18,0.00,0.00,1.00,1.00,0.14,0.07,0.00,157,18,0.11,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,113,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 10,tcp,smtp,SF,11324,1551,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,50,0.20,0.06,0.00,0.00,0.65,0.00,0.03,0.02,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,68,0.27,0.02,0.27,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,16,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,23,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,237,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,92,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,4,0.67,0.33,0.67,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,2000,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,279,2122,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,14,1.00,0.00,1.00,0.29,0.00,0.07,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.60,0.40,0.00,0.09,0.00,0.51,0.00,anomaly 0,tcp,http,SF,227,23473,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,252,1461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,144,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,145,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,10272,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,1,0.11,0.00,0.00,0.00,0.11,0.78,0.00,185,1,0.01,0.07,0.35,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,14,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,13,1.00,1.00,0.00,0.00,0.27,0.08,0.00,255,44,0.17,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,457,3,0.07,0.00,0.90,1.00,0.01,0.99,0.00,255,2,0.01,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,13,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,26,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,14,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,67,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,216,2147,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,26,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,8,0.42,0.25,0.42,0.25,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1273,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,124,0.76,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,154,0.74,0.04,0.74,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,6,255,1.00,0.00,0.17,0.18,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,215,2637,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,69,1.00,0.00,0.10,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3360,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,47,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,12418,1431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,170,0.68,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,12,1.00,1.00,0.00,0.00,0.30,0.12,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,3,1.00,1.00,0.00,0.00,0.07,0.13,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,2325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,7296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,20,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,29,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,245,0.96,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,4671,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,69,1,0.01,1.00,0.01,0.00,0.00,0.00,0.94,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,2,1.00,1.00,0.00,0.00,0.14,0.14,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,12721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,1053,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,210,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 3355,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.40,0.75,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S1,1492,649186,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,11,11,1.00,0.00,0.09,0.00,0.55,0.55,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3834,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,68,0.27,0.04,0.27,0.00,0.21,0.00,0.02,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.62,0.00,0.00,0.00,0.00,0.57,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,24,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,118,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,10,1.00,1.00,0.00,0.00,0.43,0.17,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,18,0.99,1.00,0.00,0.00,0.13,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,327,327,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,24,2,0.04,1.00,0.04,1.00,0.00,0.00,0.96,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.64,0.01,0.00,0.00,0.11,0.00,0.00,normal 0,tcp,http,SF,200,267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.02,0.02,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,234,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,smtp,S2,11772,1434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,1.00,0.50,0.00,0.00,1.00,0.00,1.00,92,192,0.97,0.02,0.01,0.01,0.03,0.02,0.00,0.00,normal 0,tcp,http,SF,217,1511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,19,0.33,0.11,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,30,0.12,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,482,9079,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,10,0.50,0.10,0.00,0.00,1.00,0.00,0.30,59,59,1.00,0.00,0.03,0.00,0.02,0.02,0.00,0.00,normal 0,tcp,http,SF,215,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,68,68,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.10,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1378,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,99,0.39,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,1223,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 524,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.61,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,10706,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,231,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,96,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,63,0.25,0.01,0.25,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,315,1177,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,6,1.00,1.00,0.00,0.00,0.20,0.13,0.00,255,66,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,3683,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,255,1.00,0.00,0.01,0.01,0.00,0.00,0.08,0.05,normal 2,tcp,smtp,SF,1190,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,231,125,0.48,0.03,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,93,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,93,0.36,0.02,0.36,0.00,0.00,0.00,0.00,0.00,anomaly 41561,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,238,2,0.01,0.25,0.50,0.00,0.00,0.00,0.50,1.00,anomaly 0,tcp,http,SF,193,19400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.33,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,53,0.22,0.02,0.22,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,6,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,4,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,1300,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,335,45893,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,17,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,262,1069,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,10352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,2,0.01,0.64,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,169,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,272,4201,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 16754,tcp,telnet,SF,3555,198172,0,0,0,2,0,1,151,1,2,146,1,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,3,0.22,0.33,0.11,0.67,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,144,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,215,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,344,2503,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,4556,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,16639,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,204,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,15,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,43,0.17,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,1095,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,99,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.04,normal 5925,tcp,IRC,RSTO,1435,3074,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,109,13,0.12,0.02,0.01,0.00,0.00,0.00,0.12,1.00,normal 0,tcp,http,SF,218,3118,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.07,0.00,0.01,0.00,0.00,normal 0,udp,private,SF,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,6,0.00,0.00,0.00,0.00,0.67,0.22,0.00,255,6,0.02,0.97,0.04,0.00,0.18,0.00,0.78,0.00,anomaly 0,tcp,http,SF,196,251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,SF,1266,2453,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,31,0.12,0.02,0.00,0.00,0.10,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,19,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1379,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,115,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,0.00,0.50,1.00,0.00,164,5,0.03,0.02,0.79,0.00,0.00,0.00,0.16,0.00,normal 0,udp,domain_u,SF,44,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,12,1.00,1.00,0.00,0.00,0.05,0.05,0.00,125,12,0.10,0.08,0.01,0.00,0.98,1.00,0.00,0.00,anomaly 6719,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.77,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,468,1,0.06,1.00,0.93,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,1.00,0.90,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,1,120,1.00,0.00,1.00,0.17,1.00,0.01,0.00,0.99,normal 0,tcp,http,SF,203,12128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,7,0.05,0.02,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,214,4115,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,163,634,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.01,0.00,0.01,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,15,0.06,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,873,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,87,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,12,0.00,0.00,1.00,1.00,0.34,0.09,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,303,1848,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,18,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,7,137,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,5,0.05,0.17,0.01,0.40,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,302,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.14,1.00,0.00,0.29,187,178,0.95,0.01,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,201,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,21,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,9,1.00,1.00,0.00,0.00,0.14,0.08,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,23,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,68,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,177,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,1,0.99,0.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.09,0.00,0.00,0.66,0.00,0.01,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,6,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,6,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,301,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,10044,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,87,0.35,0.02,0.35,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2524,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,132,121,0.50,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,99,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,99,0.58,0.02,0.58,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2194,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,123,157,0.88,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,12922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,282,51974,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,9,255,1.00,0.00,0.11,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,322,272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,178,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,508,1,0.08,0.00,0.89,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,65,0.61,0.00,0.00,0.00,0.39,0.04,0.00,255,65,0.25,0.75,0.25,0.00,0.09,0.00,0.66,0.00,anomaly 0,tcp,http,SF,308,2919,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,3605,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,2616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,21,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,8836,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,43,254,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,702,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,24,0.00,0.04,0.00,0.04,1.00,0.00,0.21,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,12250,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,157,0.83,0.01,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,232,51836,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,181,12835,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,143,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,144,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,236,0.93,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,25,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,742,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,120,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 5,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,352,1695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,866,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 12085,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.60,0.89,0.00,0.00,0.00,0.00,0.00,normal 207,tcp,http,SF,192,464,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,274,18930,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,750,344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,185,0.66,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,11609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.13,0.00,0.00,0.70,0.67,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,1,0.03,0.06,0.03,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,13,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,13,0.05,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,21,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,199,1582,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,1737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,15105,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,13,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,18,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,2688,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,149,0.58,0.03,0.59,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,206,576,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,228,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,21,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,5,1.00,1.00,0.00,0.00,0.16,0.12,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,13,19,1.00,0.00,0.08,0.26,0.00,0.00,1.00,1.00,normal 2620,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,0.00,0.00,0.00,0.00,0.40,0.60,0.00,255,2,0.01,0.87,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,2,14,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,4,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,202,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,5775,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,1002,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,20,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,1,0.01,0.00,0.91,1.00,0.01,1.00,0.00,255,1,0.00,0.42,0.00,0.00,0.00,0.00,0.38,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,29,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,1151,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,132,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,132,0.52,0.01,0.52,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,205,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,11113,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.57,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,2142,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,164,0.44,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,2408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,2196,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,253,255,1.00,0.00,0.00,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,235,805,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,177,255,1.00,0.00,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,3468,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,83,0.35,0.03,0.35,0.02,0.00,0.12,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,17,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,53,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,103,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,10,10,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,1366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,194,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,80,0.67,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,gopher,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,3,0.77,0.67,0.23,0.33,0.04,0.37,0.00,255,3,0.01,0.12,0.33,0.00,0.25,0.67,0.07,0.33,anomaly 0,tcp,http,SF,304,1000,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,7523,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.03,0.03,0.00,0.00,1.00,0.00,0.00,159,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.43,0.42,0.00,0.00,0.00,0.42,1.00,anomaly 0,tcp,http,SF,206,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2381,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,167,0.65,0.03,0.01,0.01,0.00,0.01,0.00,0.00,normal 17233,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.70,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,257,1942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 19,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,20,0.34,0.05,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,2700,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,7,255,1.00,0.00,0.14,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,618,492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,854,452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,79,168,0.41,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,126,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,19,19,1.00,0.00,0.05,0.00,0.05,0.05,0.95,0.95,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,183,183,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,http,SF,238,3227,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,14,1.00,1.00,0.00,0.00,0.25,0.07,0.00,255,54,0.21,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,225,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1226,390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,106,0.42,0.02,0.00,0.00,0.26,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,247,0.97,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,25519,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,282,1227,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,166,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1117,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,228,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,1.00,1.00,0.00,0.00,0.33,0.67,0.00,255,55,0.22,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,185,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.96,0.00,0.00,0.00,0.04,0.00,anomaly 0,tcp,smtp,SF,805,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,117,0.59,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 11565,tcp,telnet,SF,565,111864,0,0,0,0,0,1,217,1,2,247,0,0,4,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,3,0.38,0.25,0.12,0.00,0.00,0.00,0.12,0.33,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,89,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,89,0.55,0.02,0.55,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,254,11211,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,271,494,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.03,0.00,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,323,323,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.06,0.00,0.00,1.00,0.62,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,19,0.07,0.03,0.07,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,19,1.00,1.00,0.00,0.00,0.23,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,248,766,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,13,0.00,0.00,0.00,0.00,1.00,0.00,0.38,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S3,303,13335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.25,0.20,0.00,0.00,1.00,0.00,0.40,234,255,1.00,0.00,0.00,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,316,990,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S1,167,19827,0,0,0,0,0,1,83,1,2,91,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,21,8,0.29,0.14,0.05,0.25,0.05,0.12,0.00,0.00,normal 0,tcp,http,SF,242,11675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.02,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,277,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,4,0.00,0.00,0.00,0.00,0.15,0.07,0.00,255,5,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,9,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,917,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,57,0.22,0.15,0.22,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.87,1.00,anomaly 0,tcp,http,SF,245,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,417,417,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,186,690,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,1,1.00,1.00,0.00,0.00,0.05,0.25,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,234,0.92,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,3,152,1.00,0.00,0.33,0.17,0.00,0.00,1.00,0.93,normal 38192,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.13,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.14,0.00,0.86,1.00,anomaly 0,tcp,http,SF,205,2528,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,237,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,308,308,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 28,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,11,0.00,0.00,0.00,0.00,0.33,0.67,0.27,139,133,0.96,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,304,13204,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1250,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,103,142,0.61,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,17,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3083,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.64,0.88,0.00,0.00,0.00,0.00,0.00,normal 17,tcp,smtp,SF,1175,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,7,209,1.00,0.00,0.14,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,283,16588,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,0.50,1.00,0.00,1.00,3,255,1.00,0.00,0.33,0.11,0.00,0.00,1.00,0.78,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,23,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,231,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,23,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 42636,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,144,2,0.01,0.10,0.17,0.00,0.00,0.00,0.17,1.00,anomaly 0,tcp,http,SF,220,536,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,172,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,107,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,240,219,0.91,0.01,0.00,0.00,0.00,0.00,0.03,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,367,367,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,200,0.78,0.02,0.78,0.00,0.00,0.00,0.16,0.00,anomaly 0,tcp,http,SF,147,18932,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,15,247,1.00,0.00,0.07,0.11,0.00,0.00,1.00,0.40,normal 0,tcp,http,SF,382,1503,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,34513,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,88,1.00,0.00,1.00,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,3,1.00,1.00,0.00,0.00,0.09,0.12,0.00,255,51,0.20,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,1.00,1.00,0.00,0.00,0.33,1.00,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 98,tcp,http,SF,338,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,255,1.00,0.00,0.01,0.07,0.00,0.00,0.02,0.02,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,39,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,SF,35195,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,1,0.04,0.00,0.00,0.00,0.04,0.46,0.00,176,1,0.01,0.08,0.33,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.50,0.20,0.00,0.00,1.00,0.00,0.40,11,255,1.00,0.00,0.18,0.03,0.09,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,1,0.01,0.00,0.94,1.00,0.01,1.00,0.00,252,1,0.00,0.53,0.00,0.00,0.00,0.00,0.49,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,370,2113,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,78,231,1.00,0.00,0.01,0.19,0.00,0.00,0.08,0.69,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,107,0.42,0.01,0.42,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,30,0.12,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2630,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.87,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,255,1.00,0.00,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,243,201,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.17,0.29,0.00,0.00,1.00,0.00,0.29,18,255,1.00,0.00,0.06,0.02,0.06,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,331,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,237,0.93,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,2001,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,1709,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,32,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,90,89,0.99,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1403,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,177,0.71,0.07,0.02,0.01,0.00,0.00,0.00,0.00,normal 3301,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.62,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,230,43800,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,1364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,94,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,12,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,SF,26408,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,1,0.12,0.00,0.00,0.00,0.12,0.75,0.00,102,1,0.01,0.09,0.43,0.00,0.01,0.00,0.01,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,5,1.00,1.00,0.00,0.00,0.50,0.40,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,93,0.43,0.01,0.43,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,smtp,SF,1186,437,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,52,0.20,0.07,0.00,0.00,0.62,0.00,0.01,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,7,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,19,0.00,0.00,0.00,0.00,0.83,0.09,0.00,255,24,0.09,0.71,0.33,0.00,0.06,0.00,0.61,0.00,anomaly 1,tcp,smtp,SF,928,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,74,0.76,0.05,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,30,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 3,tcp,smtp,SF,1996,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,57,214,0.86,0.05,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2550,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.42,0.71,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,214,214,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,9542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,167,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,149,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,213,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1392,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,33,154,0.67,0.15,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,2052,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,196,137,0.70,0.02,0.01,0.00,0.00,0.00,0.70,1.00,normal 15,tcp,smtp,SF,1338,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,222,148,0.57,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,1295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,255,1.00,0.00,0.00,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,10,0.00,0.00,0.00,0.00,0.40,0.12,0.00,255,10,0.04,0.89,0.12,0.00,0.16,0.00,0.72,0.00,anomaly 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 32,udp,domain_u,SF,110,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,74,0.77,0.02,0.77,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,256,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,smtp,SF,9210,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,89,56,0.47,0.07,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,138,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 2671,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.40,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,1443,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.03,0.06,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,smtp,SF,1930,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,25,18,0.72,0.16,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1334,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,184,243,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,340,805,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1049,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,143,0.72,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,195,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,189,314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,154,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1436,433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,199,0.77,0.18,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,1266,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,232,172,0.69,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,276,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,186,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.02,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,181,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,227,20791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.06,0.25,0.01,0.00,0.00,normal 0,tcp,http,SF,368,451,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,268,22835,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,19,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.94,0.94,0.00,0.00,0.00,0.93,1.00,anomaly 0,udp,domain_u,SF,43,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,275,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,29,0.15,0.06,0.15,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,347,483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 9645,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.79,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8766,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,205,10,0.05,0.02,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1363,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,69,0.28,0.02,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,177,28,0.16,0.02,0.16,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,24,24,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,241,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,12,0.97,0.92,0.03,0.08,0.32,0.15,0.17,255,31,0.12,0.05,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,251,7823,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,215,0.84,0.02,0.00,0.00,0.00,0.00,0.84,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,11,1.00,1.00,0.00,0.00,0.17,0.09,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,139,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,3,0.00,0.00,0.00,0.00,0.43,0.29,0.00,255,46,0.18,0.31,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,3,1.00,0.00,1.00,0.67,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,228,462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3035,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,175,0.54,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,194,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,172,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,7,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,983,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.17,0.17,1.00,0.00,0.00,52,179,1.00,0.00,0.02,0.19,0.00,0.00,0.62,0.89,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,888,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.33,0.00,0.00,1.00,0.00,0.67,57,119,0.21,0.05,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,20,1.00,0.90,0.00,0.00,1.00,0.00,0.15,160,138,0.49,0.01,0.01,0.01,0.99,0.57,0.00,0.00,anomaly 2,tcp,smtp,SF,2352,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,106,0.46,0.03,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,250,0.00,0.00,0.00,0.00,1.00,0.00,0.01,93,200,0.84,0.02,0.84,0.01,0.00,0.00,0.12,0.00,normal 0,tcp,http,SF,205,4275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.08,0.08,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.04,0.00,0.00,0.05,0.01,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,92,1,0.01,0.49,0.48,0.00,0.07,0.00,0.46,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,27,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,199,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,3567,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4545,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.57,0.92,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,4046,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.02,0.05,0.02,0.00,0.00,normal 0,tcp,http,SF,320,2233,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.07,0.00,0.07,1.00,0.00,0.21,131,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,4116,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,105,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,30,1.00,0.00,1.00,0.13,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,36,1.00,0.00,0.03,0.00,0.00,0.00,0.31,0.31,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,3,0.00,0.00,1.00,1.00,0.04,0.09,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.18,0.00,0.82,1.00,anomaly 0,tcp,http,SF,317,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,50,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1509,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,180,0.64,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,126,0.00,0.00,0.00,0.00,0.86,0.03,0.00,255,166,0.65,0.04,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,231,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,12,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 26,tcp,ftp,SF,336,1063,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,20,0.28,0.07,0.01,0.00,0.00,0.00,0.01,0.05,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,141,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,145,20629,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,307,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,telnet,SF,138,2073,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,5,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,normal 23,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,239,0.94,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,10,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,144,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,213,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,25,0.10,0.02,0.10,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,http,SF,339,279,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,92,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,223,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,3,1.00,1.00,0.00,0.00,0.38,0.50,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 19,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,749,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,31,0.20,0.03,0.20,0.00,0.00,0.00,0.04,0.00,normal 0,tcp,http,SF,215,52248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,12542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,165,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,3,0.38,0.25,0.12,0.00,0.00,0.00,0.38,1.00,normal 0,tcp,http,SF,313,11803,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,12,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,5937,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,3,199,1.00,0.00,0.33,0.10,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,228,4869,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,2150,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,255,1.00,0.00,0.00,0.02,0.00,0.00,0.04,0.04,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,12,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,287,3880,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,244,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,27,22,0.81,0.07,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,142,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,362,936,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,141,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,166,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,52,0.57,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,391,2,0.00,0.00,1.00,1.00,0.01,0.52,0.00,255,2,0.01,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,250,271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,6,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.08,0.00,0.91,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,http,SF,235,3675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,338,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,126,126,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,229,0.90,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,4039,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 101,tcp,http,SF,305,4254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,354,8658,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,6,1.00,1.00,0.00,0.00,0.25,0.17,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,239,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,255,1.00,0.00,0.00,0.02,0.00,0.01,0.00,0.01,normal 0,tcp,http,SF,229,2573,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,198,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,7940,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,53,0.21,0.47,0.21,0.00,0.47,0.00,0.00,0.00,normal 0,tcp,http,SF,234,743,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1556,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,67,0.26,0.02,0.07,0.00,0.70,0.72,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 1,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,125,2,0.02,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,53,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,226,2631,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,normal 0,tcp,http,SF,173,25660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,268,970,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,3429,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,659,322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,113,0.63,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,6,1.00,1.00,0.00,0.00,0.18,0.12,0.00,255,46,0.18,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,17,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,371,5081,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,74,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 32,tcp,telnet,SF,162,19469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,3,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,154,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,231,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 13,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.67,0.67,1.00,0.00,0.00,17,17,1.00,0.00,0.06,0.00,0.00,0.00,0.47,0.47,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,1,0.00,0.00,0.00,0.00,0.09,0.73,0.00,255,1,0.00,0.26,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 11,tcp,smtp,SF,2710,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,232,126,0.54,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,32,1.00,0.00,1.00,0.16,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,337,1949,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,33,255,1.00,0.00,0.03,0.02,0.00,0.02,0.00,0.01,normal 0,udp,domain_u,SF,45,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,326,325,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,122,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,127,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,24,1.00,1.00,0.00,0.00,0.17,0.04,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,252,640,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,SF,14,37,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.70,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,128,128,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,ftp_data,SF,1690,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,84,0.54,0.03,0.54,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,39,0.20,0.08,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,12360,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,33,0.00,0.00,0.00,0.00,1.00,0.00,0.12,58,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,160,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,98,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,129,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,6084,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,14,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,262,531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,45,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,333,3293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,37,0.00,0.00,0.00,0.00,1.00,0.00,0.11,78,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,1368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,1015,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,12,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,1,0.00,0.00,1.00,1.00,0.00,0.53,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,131,1.00,0.00,1.00,0.28,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,263,292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,24,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,8258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,10,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,360,2756,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,231,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,19,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,18,1.00,1.00,0.00,0.00,0.78,0.09,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1384,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,242,161,0.62,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1722,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,119,132,0.44,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,http,SF,304,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,57,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,1157,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,143,193,0.80,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,7,1.00,1.00,0.00,0.00,0.24,0.14,0.00,255,47,0.18,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,262,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,80,44,0.17,0.06,0.17,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,96,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,153,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,12,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,161,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,357,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,18,1.00,1.00,0.00,0.00,0.18,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,19,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,3,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,226,2648,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,178,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10389,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,25,0.14,0.07,0.14,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,32,32,1.00,0.00,0.03,0.00,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,196,467,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,20,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,186,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,30,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,879,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,113,0.46,0.02,0.46,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 11431,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.56,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,57,0.38,0.03,0.38,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,177,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,1451,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,7,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,7,0.03,0.08,0.03,0.29,0.39,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,3819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,43,1,0.02,1.00,0.02,0.00,0.00,0.00,0.95,1.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,236,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,15,0.00,0.00,0.00,0.00,1.00,0.00,0.47,67,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,3,0.25,1.00,0.25,1.00,0.00,0.00,1.00,0.67,anomaly 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,127,1,0.01,0.92,0.94,0.00,0.94,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,79,0.01,0.00,0.01,0.00,0.98,0.04,0.00,255,79,0.31,0.02,0.31,0.00,0.00,0.00,0.52,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,304,2785,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,19,1.00,1.00,0.00,0.00,0.23,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.33,0.00,0.00,1.00,0.00,1.00,231,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,248,2462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,209,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,6,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,11,8,0.73,0.27,0.09,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,92,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,6,6,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,5,0.00,0.00,0.00,0.00,0.62,0.38,0.00,255,24,0.09,0.01,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,23,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,10,1.00,1.00,0.00,0.00,0.23,0.09,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,1302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,18,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,154,12990,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,70,255,1.00,0.00,0.01,0.06,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,43,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,187,0.00,0.00,0.00,0.00,1.00,0.00,0.02,177,196,0.77,0.02,0.68,0.01,0.00,0.00,0.08,0.00,normal 0,tcp,http,SF,405,7303,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,245,1.00,0.00,0.01,0.14,0.00,0.00,0.10,0.56,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,17,0.00,0.00,1.00,1.00,0.15,0.06,0.00,255,14,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,199,2441,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2165,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,131,0.61,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,637,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,7,0.00,0.00,0.00,0.00,0.88,0.25,0.00,45,98,0.64,0.16,0.69,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,442,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,190,2543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,261,29122,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.01,0.00,0.99,1.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,49,1.00,0.00,1.00,0.10,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,433,1,0.08,1.00,0.89,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,1.00,0.89,0.00,anomaly 16,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,131,131,1.00,0.00,0.01,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,4,1.00,1.00,0.00,0.00,0.10,0.12,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,1,0.02,0.00,0.88,1.00,0.02,1.00,0.00,255,1,0.00,0.20,0.00,0.00,0.00,0.00,0.16,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,30,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,57,0.88,0.05,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,3,0.00,0.00,1.00,1.00,0.02,0.08,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,17,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,268,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,7,0.00,0.00,0.00,0.00,0.35,0.10,0.00,255,46,0.18,0.26,0.96,0.00,0.00,0.00,0.04,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,73,0.43,0.02,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,18,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,2596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,44,44,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,9,1.00,1.00,0.00,0.00,0.06,0.05,0.00,99,9,0.09,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,12,0.05,0.26,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,298,3751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,74,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1979,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.84,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,16,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.11,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.87,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,3,1.00,1.00,0.00,0.00,0.19,0.25,0.00,255,63,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,6,1.00,0.67,0.00,0.00,1.00,0.00,0.50,146,129,0.44,0.01,0.01,0.02,0.99,0.50,0.00,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,2,1,0.50,1.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1171,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,165,206,0.82,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,1295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,94,130,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,21,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,743,333,0,0,0,0,0,1,0,0,0,0,0,0,2,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,230,131,0.55,0.03,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,123,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,telnet,SF,109,5573,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,3,0.02,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,17,177,1.00,0.00,0.06,0.16,0.00,0.00,1.00,0.94,normal 0,tcp,http,SF,200,15698,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,373,7329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,46,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,289,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,18,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,115,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,115,0.45,0.02,0.45,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,9,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,413,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,16,255,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,3946,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,176,0.91,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,351,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,195,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,18036,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,81,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,8,511,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,6,0.06,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.50,0.50,0.00,0.00,1.00,0.00,0.50,168,255,1.00,0.00,0.01,0.02,0.01,0.01,0.01,0.01,normal 0,tcp,http,SF,338,664,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,193,7355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,831,341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,131,98,0.33,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,2038,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,128,109,0.85,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,101,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,5,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,10,1.00,1.00,0.00,0.00,0.17,0.10,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2976,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.67,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,139,0.55,0.17,0.55,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,301,301,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,75,0.44,0.04,0.44,0.00,0.01,0.00,0.37,0.00,anomaly 0,tcp,http,SF,293,5093,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,67,0.04,0.04,0.00,0.00,1.00,0.00,0.12,156,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,153,11361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,109,0.00,0.00,0.00,0.00,1.00,0.00,0.03,227,162,0.71,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.17,0.17,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,http,SF,310,2730,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,25,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,346,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,21,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1339,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,31,0.23,0.04,0.23,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,213,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,799,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,355,1320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,5,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,20,0.19,0.04,0.19,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,20,75,0.05,0.15,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,17,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,555,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 42470,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,158,2,0.01,0.14,0.24,0.00,0.00,0.00,0.24,1.00,anomaly 0,tcp,http,SF,207,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,63,64,0.00,0.00,0.00,0.00,1.00,0.00,0.03,64,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,11,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,SF,1211,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,232,60,0.26,0.02,0.00,0.00,0.00,0.00,0.01,0.00,anomaly 0,udp,domain_u,SF,45,84,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,254,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,210,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,137,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,228,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,2459,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,26,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.17,0.00,0.83,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.84,1.00,anomaly 5,tcp,smtp,SF,1757,361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,0.33,0.67,0.75,255,19,0.07,0.60,0.00,0.00,0.00,0.05,0.00,0.00,normal 41476,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,246,2,0.01,0.26,0.51,0.00,0.00,0.00,0.51,1.00,anomaly 29,tcp,ftp,SF,1074,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,37,0.21,0.04,0.01,0.00,0.00,0.00,0.01,0.03,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,10,1.00,1.00,0.00,0.00,0.23,0.09,0.00,255,63,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,333,864,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,79,255,1.00,0.00,0.01,0.07,0.00,0.00,0.78,0.85,normal 0,tcp,http,SF,301,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.02,0.00,0.00,0.04,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,253,1,0.00,0.35,0.34,0.00,0.00,0.00,0.34,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S1,312,16060,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,1.00,0.67,0.00,0.00,1.00,0.00,0.67,230,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,979,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,32,88,0.91,0.12,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,13,0.00,0.00,0.00,0.00,0.93,0.14,0.00,255,13,0.05,0.94,0.07,0.00,0.16,0.00,0.78,0.00,anomaly 0,tcp,http,SF,309,4119,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.09,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,16,0.06,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,14,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,20,1.00,1.00,0.00,0.00,0.30,0.06,0.00,255,73,0.29,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,73,0.07,0.05,0.07,0.04,0.03,0.00,0.83,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,13,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,40,0.36,0.04,0.36,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,327,4058,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.13,0.00,0.00,0.52,0.65,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.40,1.00,0.20,0.60,0.00,158,1,0.01,0.07,0.01,0.00,0.01,0.00,0.01,1.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,20,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,426,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,3090,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,6,255,1.00,0.00,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,5,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,96,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,217,1819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,23,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,3,0.01,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,1397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 7,tcp,smtp,SF,1585,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,178,0.63,0.03,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,283,171,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1891,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,56,0.43,0.08,0.01,0.04,0.01,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,25,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,25,0.10,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,25,0.10,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,8737,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,80,0.39,0.08,0.39,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,47,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,23,1.00,1.00,0.00,0.00,0.21,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,3896,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,119,255,1.00,0.00,0.01,0.01,0.00,0.00,0.02,0.01,normal 2178,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.77,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,12,0.14,0.06,0.14,0.00,0.01,0.08,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,8539,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.15,0.00,0.85,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.17,0.00,0.83,1.00,anomaly 27,tcp,ftp,SF,1503,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,229,47,0.21,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,1061,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,240,240,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,http,SF,303,3120,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,167,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,167,0.65,0.01,0.65,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,197,19,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,udp,domain_u,SF,90,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.67,59,41,0.69,0.05,0.69,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,1,0.00,0.76,0.27,0.00,0.03,0.00,0.71,0.00,anomaly 0,tcp,http,SF,258,9595,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12165,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,13,79,0.62,0.15,0.62,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,15,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 31,tcp,ftp,SF,1505,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,43,0.17,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,194,1654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,158,6917,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,23,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,9,1.00,1.00,0.00,0.00,0.41,0.18,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,15,17,0.00,0.00,0.00,0.12,1.00,0.00,0.18,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,finger,SF,9,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.66,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,229,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 3764,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.50,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,25,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,191,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,127,1.00,0.00,0.01,0.00,0.00,0.00,0.02,0.02,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,482,482,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,64,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1015,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,187,0.67,0.03,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,55,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,22,0.09,0.01,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 35,tcp,ftp,SF,1499,4152,0,0,0,12,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,199,50,0.25,0.03,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,18,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,1022,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,572,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,237,0.98,0.05,0.02,0.01,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1505,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,7,134,1.00,0.00,0.14,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,354,2825,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.05,0.05,0.00,0.23,0.03,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,12,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,212,418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,2393,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.01,0.01,0.00,0.10,0.09,normal 0,tcp,http,SF,187,16118,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 17038,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,96,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,1863,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1981,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 14,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,216,0.85,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3425,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,53,0.72,0.07,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,276,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,76,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,76,0.30,0.02,0.30,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,227,457,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,198,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,10994,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.01,normal 0,udp,domain_u,SF,44,161,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,293,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,222,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,100,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,233,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,233,0.91,0.01,0.91,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,187,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1206,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,84,131,0.64,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,1,0.01,0.00,0.93,1.00,0.01,1.00,0.00,220,1,0.00,0.46,0.00,0.00,0.00,0.00,0.41,1.00,anomaly 0,tcp,http,SF,316,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 20,tcp,telnet,SF,115,12486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,3,0.02,0.11,0.02,0.67,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1030,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,132,0.52,0.03,0.52,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,1,0.02,0.00,0.95,1.00,0.01,1.00,0.00,255,1,0.00,0.75,0.00,0.00,0.01,0.00,0.70,1.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,191,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,7,1.00,1.00,0.00,0.00,0.54,0.15,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.50,0.50,1.00,0.00,0.00,161,172,1.00,0.00,0.01,0.03,0.01,0.01,0.26,0.30,normal 0,tcp,http,SF,314,479,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,26,0.00,0.00,0.00,0.00,1.00,0.00,0.19,11,255,1.00,0.00,0.09,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,16441,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,159,0.94,0.11,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,12,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2467,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.87,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,188,0.00,0.00,0.00,0.00,0.99,0.01,0.00,78,45,0.58,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,5,0.00,0.00,0.00,0.00,0.12,0.10,0.00,255,5,0.02,0.08,0.26,0.00,0.00,0.00,0.66,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,212,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,62,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,1.00,1.00,0.00,0.00,1.00,0.00,0.00,22,22,1.00,0.00,0.05,0.00,0.91,0.91,0.00,0.00,anomaly 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,166,0.84,0.01,0.84,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,52,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,52,0.20,0.02,0.20,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,173,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,216,10,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,208,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,208,0.82,0.01,0.82,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,338,4279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,192,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,225,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,255,1.00,0.00,0.01,0.02,0.00,0.01,0.04,0.04,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,259,295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.06,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,1784,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,44,232,0.98,0.05,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,6224,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,29,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,277,5721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,11,0.00,0.00,0.00,0.00,1.00,0.00,0.45,34,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,4083,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,1672,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,72,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,178,2563,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,19,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S1,2187080,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,173,101,0.58,0.07,0.64,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,59,255,1.00,0.00,0.02,0.06,0.00,0.00,1.00,1.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,143,57,0.38,0.03,0.38,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,15,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,19,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,419,1,0.06,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,1.00,1.00,0.00,0.00,0.50,0.75,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,25024,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,277,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,63,0.94,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,194,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,8734,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,264,481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,9455,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,7609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,16,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,252,451,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,310,1738,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.04,0.01,0.01,0.00,0.00,normal 0,udp,domain_u,SF,43,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,96,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,144,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,7,1.00,1.00,0.00,0.00,0.10,0.10,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 15,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,238,0.93,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.48,0.47,0.00,0.00,0.00,0.47,1.00,anomaly 3,tcp,smtp,SF,1302,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,154,0.60,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1214,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,35,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,327,182,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,2344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,16,1.00,0.00,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,76,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,176,0.69,0.31,0.69,0.00,0.09,0.00,0.22,0.00,anomaly 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,9,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,121,0.68,0.01,0.68,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,141,18,0.13,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,863,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,6055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,4,1.00,1.00,0.00,0.00,0.20,0.20,0.00,255,57,0.22,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,1770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,27,255,1.00,0.00,0.04,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,13,0.00,0.00,1.00,1.00,0.09,0.06,0.00,216,13,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,63,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,70,0.27,0.04,0.27,0.00,0.17,0.00,0.02,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,14,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,309,534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,486,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 26848,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,304,784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,202,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1663,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,213,127,0.52,0.02,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,20,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,17,0.85,0.10,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,96,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,5087,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,68,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,23,1.00,1.00,0.00,0.00,0.08,0.04,0.00,146,23,0.16,0.07,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,347,1110,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,26,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,16,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,16,0.06,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,852,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,111,0.44,0.02,0.44,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,390,390,0.00,0.00,0.00,0.00,1.00,0.00,0.00,234,140,0.60,0.03,0.60,0.00,0.01,0.00,0.27,0.00,anomaly 0,tcp,http,SF,213,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,216,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 5,tcp,gopher,SF,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,2,0.02,1.00,0.02,1.00,0.00,0.00,0.92,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,210,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,339,1092,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,203,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,1,1.00,1.00,0.00,0.00,0.05,0.32,0.00,255,16,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,830,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,134,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,326,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,246,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,14949,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,S3,199,10449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.05,0.08,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,965,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,109,0.32,0.14,0.32,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,240,8,0.03,0.07,0.00,0.00,0.94,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1289,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,129,88,0.68,0.03,0.01,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 92,tcp,http,SF,312,178,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,158,10144,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,45,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.02,0.18,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,16,0.00,0.00,1.00,1.00,0.23,0.07,0.00,255,15,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,301,4433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,12,100,1.00,0.00,0.08,0.02,0.00,0.00,1.00,1.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,363,363,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,85,16,0.19,0.08,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,215,0.84,0.02,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,229,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,13,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,277,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.05,0.05,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.03,0.05,0.01,0.00,0.00,normal 0,tcp,http,SF,218,1853,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,0,11269,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,0.50,1.00,0.22,201,74,0.37,0.03,0.00,0.00,0.01,0.03,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,5,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,243,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,137,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,8487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.07,0.07,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,346,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,29,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,349,12591,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12324,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,117,3,0.98,0.00,0.00,0.00,0.02,0.07,0.67,255,20,0.08,0.09,0.10,0.00,0.76,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,19,1.00,1.00,0.00,0.00,0.86,0.09,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,4,1.00,1.00,0.00,0.00,0.44,0.33,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,102,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,243,0.95,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,171,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,291,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.03,0.00,0.02,0.00,0.00,normal 0,tcp,http,SF,194,15965,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,185,126,0.68,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,267,666,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,84,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,10,250,1.00,0.00,0.10,0.29,0.00,0.00,1.00,1.00,normal 1,tcp,smtp,SF,850,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,178,136,0.76,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,247,32365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,3846,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1591,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,13,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,194,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,45,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,1374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,169,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1470,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,103,0.40,0.03,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,104,0.00,0.00,0.00,0.00,0.91,0.02,0.00,255,180,0.71,0.04,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,26,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,54,0.80,0.40,0.80,0.06,0.00,0.02,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,123,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,226,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,17,1.00,1.00,0.00,0.00,0.12,0.04,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,2361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,15,0.00,0.00,0.00,0.00,1.00,0.00,0.27,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,92,0.36,0.02,0.36,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,SF,342,9542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.01,0.95,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,264,19932,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,38,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,63,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,300,413,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,35,1.00,0.00,0.33,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,994,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,255,1.00,0.00,0.01,0.02,0.00,0.01,0.04,0.04,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,14,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 38,tcp,ftp,SF,1441,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,27,0.16,0.02,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,246,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,286,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,324,1,0.00,0.00,1.00,1.00,0.00,0.51,0.00,255,1,0.00,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,6,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,16070,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,110,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 16,tcp,smtp,SF,2308,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,226,145,0.60,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.67,0.04,0.33,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,16,0.00,0.00,1.00,1.00,0.18,0.07,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,3008,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,3394,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,234,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,22,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,94,89,0.95,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,209,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,58,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,287,811,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,552,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,8,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,426,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,18,1.00,1.00,0.00,0.00,0.35,0.08,0.00,255,38,0.15,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,2039,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,49,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,366,1,0.06,1.00,0.93,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,1.00,0.92,0.00,anomaly 0,tcp,http,SF,244,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,49,1.00,0.41,0.00,0.00,0.07,0.06,0.06,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 13,tcp,smtp,SF,1555,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,112,0.44,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,929,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,112,0.39,0.16,0.01,0.02,0.02,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,47,0.18,0.02,0.08,0.00,0.35,0.49,0.00,0.00,normal 2,tcp,http,SF,252,14445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,1021,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,59,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,1,0.00,0.00,0.00,0.00,0.10,0.80,0.00,255,1,0.00,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,212,2071,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,20,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.43,0.43,1.00,0.00,0.00,160,171,1.00,0.00,0.01,0.04,0.01,0.01,0.26,0.30,normal 0,tcp,http,SF,251,1911,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,1037,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,23,1.00,0.00,0.05,0.09,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,760,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,161,155,0.83,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,8,0.50,0.12,0.00,0.00,1.00,0.00,0.25,50,255,1.00,0.00,0.04,0.07,0.06,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,102,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,199,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,283,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,20,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,52,0.20,0.04,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,11,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,226,1270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,17,22,1.00,0.00,0.06,0.09,0.00,0.09,1.00,0.82,normal 1,tcp,smtp,SF,3503,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,197,0.69,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 710,tcp,telnet,SF,664,20377,0,0,0,0,0,1,3,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,23,0.09,0.07,0.00,0.00,0.82,0.70,0.01,0.09,normal 0,tcp,http,SF,216,1418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,138,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,274,0.00,0.00,0.00,0.00,1.00,0.01,0.00,164,131,0.80,0.01,0.35,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,78,0.07,0.86,0.06,0.03,0.00,0.00,0.82,0.01,normal 0,tcp,http,SF,279,602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,54,0.00,0.00,0.00,0.00,1.00,0.00,0.09,149,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 18,tcp,telnet,SF,115,6133,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,216,1,0.00,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,4,0.00,0.00,0.00,0.50,1.00,0.00,0.75,53,53,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,2996,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,235,5,0.02,0.07,0.00,0.00,0.94,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.75,0.00,255,1,0.00,0.53,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,2,0.00,0.00,0.00,0.00,0.22,0.22,0.00,255,244,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,162,30113,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,343,134175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,255,1.00,0.00,0.00,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,251,1.00,0.00,0.12,0.14,0.00,0.00,1.00,0.96,normal 0,tcp,http,SF,210,738,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,30,0.12,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,18,1.00,1.00,0.00,0.00,0.37,0.08,0.00,255,58,0.23,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,15,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ssh,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,17,0.00,0.00,1.00,1.00,0.13,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,241,361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,18,0.00,0.00,0.00,0.00,0.60,0.10,0.00,255,18,0.07,0.18,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,10044,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,180,118,0.59,0.02,0.59,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,100,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,292,246,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,33,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,287,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,120,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,205,659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.03,0.03,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,3,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,8,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,1,0.00,0.00,1.00,1.00,0.00,0.08,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,853,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,197,0.75,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,12,1.00,1.00,0.00,0.00,0.31,0.10,0.00,255,52,0.20,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,17,1.00,1.00,0.00,0.00,0.46,0.05,0.00,255,17,0.07,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,373,373,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,20,0.00,0.00,0.00,0.00,0.43,0.09,0.00,255,86,0.34,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1589,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,104,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,418,9927,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,245,1.00,0.00,0.01,0.18,0.00,0.00,0.16,0.73,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,19,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,60,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,285,1345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.04,0.04,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,11556,1383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,164,0.81,0.06,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1240,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,196,0.77,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,9,0.20,0.09,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,181,2467,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,18,0.08,0.05,0.08,0.00,0.02,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,92,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,174,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,SF,16787,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,12,1,0.08,0.00,0.00,0.00,0.08,0.50,0.00,60,1,0.02,0.17,0.70,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,388,138,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.33,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,9,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,1891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,48,0.00,0.00,0.00,0.00,1.00,0.00,0.04,22,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,20,67,0.30,0.15,0.30,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,1026,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,407,1,0.07,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 5,tcp,ftp,RSTO,180,828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,2,1,0.00,0.00,0.50,1.00,0.50,1.00,0.00,20,4,0.20,0.20,0.05,0.00,0.00,0.00,0.05,0.25,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,253,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,179,255,1.00,0.00,0.01,0.01,0.02,0.01,0.01,0.00,normal 31809,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,338,1893,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,218,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1363,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,31,56,0.55,0.10,0.55,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,106,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,34,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,233,636,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,40,255,1.00,0.00,0.03,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,80,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,280,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,35,255,1.00,0.00,0.03,0.15,0.03,0.00,0.66,0.94,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,15,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,8,0.00,0.00,0.00,0.00,0.62,0.15,0.00,255,8,0.03,0.16,0.90,0.00,0.00,0.00,0.10,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,12,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,26,0.12,0.02,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,263,895,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,34,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,819,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,119,0.84,0.05,0.84,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,46,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,304,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,2792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,32,0.06,0.03,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 5632,tcp,telnet,SF,3053,439262,0,0,0,2,0,1,193,0,1,191,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,26,0.21,0.05,0.01,0.00,0.01,0.04,0.02,0.08,normal 13500,tcp,telnet,RSTO,125,10835,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,28,11,0.39,0.14,0.04,0.00,0.04,0.09,0.04,0.09,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,20,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,5,0.00,0.00,1.00,1.00,0.03,0.08,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 7,tcp,ftp,SF,55,170,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,7,0.29,0.12,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,87,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,87,0.34,0.04,0.34,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,259,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,39,0.20,0.58,0.19,0.05,0.00,0.00,0.53,0.03,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,184,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,118,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,246,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,202,0.79,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3057,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,103,0.47,0.04,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.29,0.00,0.00,1.00,0.00,0.43,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,846,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,241,255,1.00,0.00,0.00,0.02,0.00,0.00,0.15,0.19,normal 0,tcp,http,SF,331,1047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,32,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,51,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1363,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,56,0.33,0.02,0.33,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,1469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,86,255,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,24,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1713,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,167,0.77,0.13,0.03,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,12286,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,55,0.35,0.02,0.35,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1074,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,181,2,0.99,0.00,0.00,0.00,0.01,0.07,1.00,255,13,0.05,0.07,0.00,0.00,0.93,0.00,0.00,0.00,normal 0,tcp,http,SF,186,5422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,93,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,79,0.31,0.13,0.31,0.00,0.00,0.00,0.00,0.00,anomaly 3030,udp,domain_u,SF,17,17,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,171,0.67,0.01,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,163,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,4017,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,7,255,1.00,0.00,0.14,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,220,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,41,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,208,776,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1207,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,175,0.64,0.04,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,337,1493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,120,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,191,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,8422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,70,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,49,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,5336,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,60,0.24,0.02,0.14,0.00,0.29,0.33,0.00,0.00,normal 0,tcp,http,SF,219,484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S1,169360,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,133,37,0.19,0.04,0.19,0.05,0.03,0.03,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,14,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,250,7353,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,255,1.00,0.00,0.02,0.15,0.00,0.00,0.00,0.80,normal 0,tcp,smtp,SF,2895,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,73,0.29,0.24,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,42,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,21,1.00,0.90,0.00,0.00,1.00,0.00,0.14,41,153,0.46,0.05,0.02,0.01,0.95,0.12,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8,tcp,nntp,SF,6,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,509,1,0.02,0.00,0.97,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.02,0.00,0.97,0.00,anomaly 0,tcp,ftp_data,SF,190,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,2,0.04,0.07,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,186,409,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,19,255,1.00,0.00,0.05,0.01,0.05,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,114,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,803,389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,123,0.48,0.02,0.00,0.00,0.46,0.49,0.00,0.00,normal 19759,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.64,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,6,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,11,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1647,384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,121,0.47,0.02,0.00,0.00,0.51,0.57,0.00,0.00,normal 0,tcp,ftp_data,SF,10389,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,30,0.18,0.04,0.18,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4764,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.55,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,245,0.00,0.00,0.00,0.00,1.00,0.00,0.01,88,200,0.83,0.02,0.83,0.01,0.00,0.00,0.12,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.05,0.05,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,23,1.00,1.00,0.00,0.00,0.32,0.06,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,13988,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,118,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,193,441,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,37,0.00,0.00,0.00,0.00,1.00,0.00,0.08,15,255,1.00,0.00,0.07,0.04,0.00,0.04,0.00,0.00,normal 0,tcp,http,SF,260,6961,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,69,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,80,221,0.85,0.03,0.85,0.01,0.12,0.00,0.00,0.00,normal 0,tcp,http,SF,247,1581,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,344,274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 2,tcp,smtp,SF,1273,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,160,0.96,0.07,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,2042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,42,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,668,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,52,56,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,2191,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,74,0.29,0.02,0.29,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,121,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,5739,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,2345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,3,215,1.00,0.00,0.33,0.01,0.00,0.00,0.00,0.01,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,6,0.00,0.00,0.00,0.00,0.86,0.29,0.00,104,61,0.59,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,1606,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,53,59,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,9,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,219,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,299,13887,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,14,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1010,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,9,0.60,0.20,0.60,0.00,0.07,0.11,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,246,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,http,SF,216,3024,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,275,9478,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,12,0.06,0.03,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,2058,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,777,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,56,62,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 19025,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.59,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,19,0.00,0.00,1.00,1.00,0.22,0.07,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,116,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,130,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,149,27078,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.50,0.00,0.00,1.00,0.00,1.00,149,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,14,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1214,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,70,0.27,0.02,0.27,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,3,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,665,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,143,0.33,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,21,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,21,0.08,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,12,1.00,1.00,0.00,0.00,0.21,0.11,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTR,24252,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,184,1,0.01,0.07,0.01,0.00,0.92,1.00,0.01,0.00,anomaly 0,tcp,smtp,SF,3798,583,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,181,0.93,0.05,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,2006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,6529,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,149,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,21,1.00,1.00,0.00,0.00,0.07,0.04,0.00,248,21,0.08,0.06,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 323,tcp,telnet,SF,260,1908,0,0,0,0,0,1,6,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,12,0.05,0.09,0.00,0.00,0.73,0.25,0.01,0.17,normal 0,tcp,http,SF,190,1463,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,174,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1046,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,89,241,0.94,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,6932,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,30,0.14,0.03,0.14,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,pm_dump,SF,44,556,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.17,0.00,0.17,1.00,0.00,116,1,0.01,0.11,0.01,0.00,0.00,0.00,0.03,0.00,anomaly 0,tcp,http,SF,229,2090,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.14,0.11,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,235,3796,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,96,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10073,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,18,0.00,0.00,0.00,0.00,0.95,0.11,0.00,255,32,0.13,0.03,0.13,0.00,0.00,0.00,0.00,0.00,normal 6616,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,3,0.01,0.65,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,271,3123,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 1100,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.57,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,183,63,0.32,0.03,0.32,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,23,1.00,1.00,0.00,0.00,0.24,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,165,1,0.01,0.15,0.27,0.00,0.00,0.00,0.27,1.00,anomaly 3405,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,2,0.01,0.52,0.87,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,16,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,199,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,19,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,35,0.14,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,21,0.00,0.00,0.00,0.00,0.88,0.08,0.00,255,34,0.13,0.67,0.37,0.00,0.05,0.00,0.58,0.00,anomaly 0,tcp,smtp,SF,705,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,129,0.77,0.13,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,275,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.80,0.79,0.00,0.00,0.00,0.79,1.00,anomaly 0,tcp,http,SF,218,6189,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,252,1.00,0.00,0.33,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,26504,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,5280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,250,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,25,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,13,1.00,1.00,0.00,0.00,0.20,0.09,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,237,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,180,2401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,34,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,2,0.00,0.00,0.00,0.00,0.12,0.44,0.00,255,2,0.01,0.25,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 3,tcp,finger,SF,6,28,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.91,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.87,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,1128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,178,13294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,8,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1383,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,115,0.96,0.04,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,18,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.81,0.79,0.00,0.00,0.00,0.79,1.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,2,0.00,0.00,0.00,0.00,0.08,0.25,0.00,255,2,0.01,0.22,0.65,0.00,0.00,0.00,0.29,0.00,anomaly 0,tcp,http,SF,338,1228,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,12469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,15,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,233,0.91,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,46,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,6,125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.92,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.86,0.00,anomaly 0,tcp,http,SF,223,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.03,0.00,0.00,1.00,0.40,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,1,1.00,1.00,0.00,0.00,0.04,0.12,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,4073,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,67,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8325,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,60,0.28,0.02,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,6178,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.98,0.03,0.00,0.13,0.00,0.85,0.00,anomaly 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,123,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,316,1373,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,31,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,166,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,382,3755,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,20,1.00,1.00,0.00,0.00,0.30,0.06,0.00,149,40,0.27,0.03,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3482,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,48,0.22,0.03,0.22,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,1735,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,224,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,197,5989,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,156,5430,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,7,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,20737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,68,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,24,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.95,0.94,0.00,0.00,0.00,0.94,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,45,255,1.00,0.00,0.02,0.13,0.00,0.00,1.00,1.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,29,0.11,0.01,0.56,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,56,0.22,0.02,0.22,0.00,0.02,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,160,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,322,321,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,86,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,275,833,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,11,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,158,12234,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,33,1.00,0.00,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.56,0.51,0.00,0.02,0.00,0.52,1.00,anomaly 0,tcp,http,SF,211,304,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,19,0.00,0.00,0.00,0.05,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,31,1.00,0.00,0.03,0.00,0.00,0.00,0.35,0.35,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,361,361,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,24,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.20,0.20,1.00,0.00,0.00,9,9,1.00,0.00,0.11,0.00,0.00,0.00,0.11,0.11,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,20,2,0.05,1.00,0.05,1.00,0.00,0.00,0.80,1.00,anomaly 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,139,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,3,1.00,1.00,0.00,0.00,0.75,0.50,0.00,255,63,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,319,12434,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,34,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,353,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.25,0.09,0.00,0.09,1.00,0.00,0.18,4,255,1.00,0.00,0.25,0.03,0.25,0.01,0.00,0.00,normal 0,tcp,http,SF,262,6604,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,222,202,0.91,0.01,0.00,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,263,4097,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,149,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,3396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,41,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,4,0.05,0.05,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,229,479,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,138,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,1321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,3,255,1.00,0.00,0.33,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,218,901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,12,1.00,0.00,0.20,0.25,0.20,0.08,0.00,0.00,normal 0,tcp,http,SF,190,1786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,854,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,88,0.38,0.03,0.38,0.02,0.01,0.01,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,337,337,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 2639,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.76,1.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,finger,SF,7,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,11,0.12,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,9,0.07,0.05,0.02,0.22,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,19,1.00,0.95,0.00,0.00,0.07,0.06,0.11,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,5,0.00,0.00,0.00,0.00,0.71,0.43,0.00,255,5,0.02,0.35,0.84,0.00,0.00,0.00,0.16,0.00,anomaly 0,tcp,http,SF,287,1432,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,326,1639,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,76,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,277,308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,6314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,4205,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 5,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,65,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,2,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,120,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,67,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,181,0.71,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,38,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,471,471,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,336,2436,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,15,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,122,1.00,0.00,0.33,0.07,0.00,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,19,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 22,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,99,0.16,0.08,0.16,0.02,0.03,0.00,0.00,0.00,normal 0,tcp,http,SF,203,1744,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,145,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,0.90,0.00,0.00,0.07,0.00,0.72,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,6,0.38,0.12,0.38,0.00,0.00,0.00,0.00,0.00,normal 9,tcp,ftp_data,SF,0,5150836,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,6,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,138,0.76,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1492,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,52,121,0.31,0.08,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,26,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,7,0.00,0.00,0.00,0.00,0.35,0.15,0.00,255,7,0.03,0.84,0.17,0.00,0.16,0.00,0.67,0.00,anomaly 0,tcp,http,RSTR,43232,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.40,0.40,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.50,1.00,0.50,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.18,0.00,0.00,1.00,1.00,normal 6381,tcp,IRC,RSTR,863,9618,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,22,5,0.23,0.14,0.05,0.00,0.00,0.00,0.23,1.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,7,1.00,1.00,0.00,0.00,0.22,0.12,0.00,255,60,0.24,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,6,0.96,1.00,0.04,0.00,0.21,0.18,0.00,255,26,0.10,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,161,151,0.94,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,345,1556,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,52,0.00,0.00,0.00,0.00,1.00,0.00,0.04,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.83,0.83,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.17,0.00,0.00,0.95,0.99,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,25728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,25,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,25,0.10,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1564,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,186,191,0.75,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,1164,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,13,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,192,654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,19,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,9,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,190,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,99,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,329,1816,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,161,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,1330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,321,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,17,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,11689,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,33,0.00,0.00,0.00,0.03,1.00,0.00,0.18,20,255,1.00,0.00,0.05,0.04,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,17,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,140,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,617,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1343,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,123,167,0.59,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 17419,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,290,482,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,245,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,356,558,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,23,255,1.00,0.00,0.04,0.07,0.00,0.00,0.04,0.00,normal 0,tcp,http,SF,325,13391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,70,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,3,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,17,0.00,0.00,1.00,1.00,0.20,0.07,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 12,tcp,telnet,SF,213,232250,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,9,0.10,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1880,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,19,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,322,18873,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,3054,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,69,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,49,51,0.22,0.10,0.22,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,1197,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,15,0.33,0.13,0.00,0.07,1.00,0.00,0.40,7,255,1.00,0.00,0.14,0.03,0.14,0.02,0.00,0.00,normal 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,6,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,15,0.00,0.00,0.00,0.00,0.94,0.12,0.00,255,15,0.06,0.56,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,178,50,0.19,0.02,0.19,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 17365,tcp,IRC,RSTR,2825,8579,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,123,25,0.20,0.02,0.01,0.00,0.00,0.00,0.10,0.48,normal 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,8,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,20,1.00,0.65,0.00,0.00,0.05,0.07,0.10,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,276,361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,38,0.15,0.21,0.15,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,44,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,44,0.17,0.64,0.17,0.00,0.02,0.00,0.52,0.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,13,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3009,402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,43,0.17,0.06,0.00,0.00,0.60,0.00,0.01,0.00,normal 0,tcp,http,SF,305,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,204,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,215,0.84,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1140,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,76,0.49,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,79,255,1.00,0.00,0.01,0.05,0.01,0.01,0.00,0.00,normal 1,tcp,smtp,SF,1919,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,115,195,0.73,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,152,484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,69,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,8,1.00,1.00,0.00,0.00,0.44,0.11,0.00,255,56,0.22,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,189,0.86,0.01,0.86,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,332,2753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,2430,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,255,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,797,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,14,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,6,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,6,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,278,2444,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,16,0.00,0.06,0.00,0.00,1.00,0.00,0.38,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 3916,tcp,telnet,SF,481,3431,0,0,0,0,1,1,0,0,1,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,14,0.36,0.10,0.03,0.00,0.00,0.00,0.05,0.14,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,146,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,195,0.76,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,17,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,241,48,0.20,0.02,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,1368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,361,1264,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,814,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,237,8892,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,199,1.00,0.00,0.04,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,smtp,SF,1476,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,137,0.64,0.06,0.01,0.02,0.00,0.01,0.03,0.04,normal 0,tcp,ftp_data,SF,40494,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,53,0.41,0.08,0.41,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,16787,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,101,0.62,0.03,0.62,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,250,42340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,108,237,1.00,0.00,0.01,0.05,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,184,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,16070,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,8435,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,38,0.00,0.00,0.00,0.00,1.00,0.00,0.05,166,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.47,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,732,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,161,55,0.22,0.02,0.22,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,11396,1428,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,132,0.43,0.01,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,0,2072,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,4,3,0.00,0.00,0.00,0.00,0.75,0.50,0.00,3,5,1.00,0.00,1.00,0.40,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1699,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,44,0.24,0.03,0.24,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,350,1769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,29,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1030,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,70,0.29,0.02,0.29,0.03,0.00,0.00,0.04,0.00,normal 0,tcp,http,SF,276,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,12,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,1496,323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,175,0.67,0.67,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,269,38544,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.04,0.00,0.00,0.20,0.08,normal 0,tcp,http,SF,397,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,11,255,1.00,0.00,0.09,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,17,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,3101,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,39,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,12,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,180,36668,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 4675,tcp,telnet,SF,459,81673,0,0,0,2,1,1,2,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.96,0.00,0.00,0.95,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,6,0.15,0.08,0.15,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,32,0.23,0.15,0.23,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,229,0.90,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,10,0.00,0.00,1.00,1.00,0.07,0.06,0.00,213,10,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,84,17,0.20,0.13,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,268,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 57,tcp,telnet,SF,122,7475,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,24,0.00,0.00,0.00,0.00,0.77,0.10,0.00,255,24,0.09,0.56,0.48,0.00,0.05,0.00,0.47,0.00,anomaly 0,tcp,ftp_data,SF,7280,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,112,0.48,0.02,0.48,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,162,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,12338,918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,10,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,298,5281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 4219,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.41,0.79,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,814,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,154,184,0.79,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,2714,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,20,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,39,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,118,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,2584,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,101,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,211,1696,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.67,13,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,16,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1289,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,122,0.73,0.09,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,10,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,3923,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 13,tcp,X11,SF,405412,38492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,18,0.07,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,1043,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,182,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.12,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.90,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,108,0.42,0.02,0.42,0.00,0.02,0.00,0.00,0.00,anomaly 20,tcp,ftp,SF,239,769,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,71,0.28,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,248,2242,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,255,1.00,0.00,0.02,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,263,17087,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,19,0.00,0.00,1.00,1.00,0.15,0.07,0.00,53,19,0.36,0.11,0.02,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,8,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,11766,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,36,2,0.03,1.00,0.03,1.00,0.00,0.00,0.92,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,12,1.00,1.00,0.00,0.00,0.31,0.10,0.00,255,32,0.13,0.06,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 2052,udp,domain_u,SF,89,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,137,0.96,0.02,0.29,0.00,0.00,0.00,0.00,0.00,normal 2009,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.69,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.95,0.95,0.00,0.00,0.00,0.94,1.00,anomaly 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,28,1,0.04,0.71,0.71,0.00,0.71,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,15377,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,47,0.78,0.05,0.78,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,39,0.27,0.04,0.27,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,13,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 15,tcp,smtp,SF,903,388,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.58,0.00,0.00,0.58,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,341,15693,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,1090,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,174,255,1.00,0.00,0.01,0.04,0.00,0.01,0.01,0.01,normal 0,tcp,smtp,SF,953,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,81,58,0.72,0.05,0.01,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,350,3436,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,118,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,146,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,2511,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,51,96,0.51,0.08,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,110,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,189,10416,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,2,0.06,1.00,0.06,1.00,0.00,0.00,0.89,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,139,255,1.00,0.00,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,214,3184,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,2,88,1.00,0.00,0.50,0.12,0.50,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,24,1.00,1.00,0.00,0.00,0.30,0.06,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,84,34,0.40,0.02,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,147,0.86,0.01,0.86,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,134,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,227,654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,39,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,263,4399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,57,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,127,2,0.02,0.04,0.01,0.00,0.02,1.00,0.00,0.00,normal 0,udp,domain_u,SF,17,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,147,209,0.90,0.01,0.90,0.01,0.00,0.00,0.07,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,41,0.45,0.13,0.55,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,204,13599,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1635,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,79,0.31,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,66,0.21,0.18,0.21,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.21,0.00,0.78,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.20,0.00,0.79,1.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,2,0.01,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,1317,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,40,40,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,157,153,0.97,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,53,0.21,0.02,0.21,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,156,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,458,4,0.07,0.00,0.90,1.00,0.01,0.99,0.00,255,3,0.01,0.99,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 2814,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.66,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,361,250,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.14,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,348,4712,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,20,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,230,715,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,992,358,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,157,0.53,0.07,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.04,0.02,0.00,0.00,0.00,0.02,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,251,1.00,0.00,1.00,0.18,0.00,0.00,1.00,0.59,normal 0,tcp,http,SF,263,2245,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,81,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,248,3112,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2450,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,884,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,30,0.34,0.07,0.34,0.00,0.00,0.00,0.01,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,151,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,337,337,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,16,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,280,6982,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,112,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,229,0.90,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,750,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,198,0.84,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3121,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,161,0.42,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1438,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,20,1.00,0.00,0.08,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,15,1.00,1.00,0.00,0.00,0.10,0.05,0.00,226,19,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,21,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,37,53,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,78,77,0.99,0.03,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,30,1.00,0.00,1.00,0.17,0.00,0.03,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2015,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,0.00,0.00,0.00,0.00,0.40,0.60,0.00,255,4,0.02,0.58,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,9,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,3,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,45,1.00,0.00,1.00,0.16,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,292,1569,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,13,0.00,0.00,0.00,0.00,1.00,0.00,0.31,70,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,215,1718,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,123,0.48,0.52,0.48,0.00,0.09,0.00,0.43,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,17,1.00,1.00,0.00,0.00,0.55,0.06,0.00,231,58,0.25,0.02,0.00,0.03,1.00,0.98,0.00,0.00,anomaly 0,tcp,finger,SF,8,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,2,0.02,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,603,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,248,2224,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,218,36749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,138,138,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 3,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,253,210,0.83,0.02,0.00,0.00,0.00,0.00,0.83,1.00,normal 0,tcp,http,SF,283,6560,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.33,0.00,0.00,0.01,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1591,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.71,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,117,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,1478,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,255,1.00,0.00,0.01,0.02,0.00,0.01,0.00,0.00,normal 4,tcp,http,SF,250,1682,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,214,214,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,219,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,230,0.90,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,80,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,21,0.08,0.06,0.08,0.00,0.80,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.08,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.89,1.00,anomaly 2,tcp,pop_3,SF,66,2591,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,194,4,0.02,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,219,519,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,7,255,1.00,0.00,0.14,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,11,1.00,1.00,0.00,0.00,0.26,0.09,0.00,255,59,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1304,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,103,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,35195,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,32,0.80,0.05,0.80,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,3,0.94,1.00,0.06,0.00,0.19,0.31,0.00,255,24,0.09,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,44,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,219,4948,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,394,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,235,1.00,0.00,0.20,0.18,0.00,0.00,1.00,0.59,normal 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,255,24,0.09,0.04,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,95,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,306,504,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,4,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,normal 7009,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.77,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,10,103,1.00,0.00,0.10,0.02,0.10,0.01,0.90,0.88,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,15,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,131,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1714,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,29,247,1.00,0.00,0.03,0.06,0.00,0.00,1.00,0.53,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,3571,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,9,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,241,3057,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,286,171,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,5285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,37,0.00,0.00,0.00,0.00,0.50,1.00,0.08,255,207,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,16641,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,34,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,186,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,18,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,32,0.13,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,2,0.00,0.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,76,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,40,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1422,407,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,103,173,0.95,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,341,1531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,204,1.00,0.00,0.03,0.10,0.00,0.00,0.47,0.72,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,2,1.00,1.00,0.00,0.00,0.25,0.50,0.00,88,28,0.25,0.05,0.02,0.07,1.00,0.79,0.00,0.00,anomaly 0,udp,domain_u,SF,45,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,125,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,641,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,163,0.54,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,87,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,187,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,206,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,921,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,252,913,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,93,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 26588,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,553,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,27,193,0.96,0.07,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,149,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,12,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,289,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,22,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,2102,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,36,255,1.00,0.00,0.03,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,930,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,0.33,1.00,1.00,98,160,0.79,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,4,1.00,1.00,0.00,0.00,0.17,0.13,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,930,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,201,1.00,0.00,1.00,0.10,0.00,0.00,1.00,1.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.01,0.06,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,299,439,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,28,0.00,0.00,0.00,0.00,1.00,0.00,0.14,70,230,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,342,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,129,1.00,0.00,1.00,0.42,0.00,0.00,0.00,0.00,normal 12,udp,domain_u,SF,96,31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,7,5,0.71,0.29,0.71,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,19,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,6,0.00,0.00,0.00,0.00,0.25,0.17,0.33,255,11,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,37,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,1,0.07,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.87,1.00,anomaly 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,154,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,176,0.69,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,RSTR,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,5,1.00,0.00,1.00,0.60,0.00,0.00,1.00,0.20,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.14,0.00,0.00,1.00,0.94,normal 0,tcp,http,SF,224,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.44,150,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2221,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,230,146,0.57,0.01,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,183,9736,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.20,0.20,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,9,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,9,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,888,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,148,0.55,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,40,44,0.12,0.12,0.12,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,253,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,1115,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,37,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.73,0.73,0.00,0.00,0.00,0.72,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,10,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,20,0.08,0.02,0.08,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,212,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,pop_3,SF,6,151,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.91,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.90,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,457,457,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,201,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,5,254,0.80,0.40,0.80,0.25,0.20,0.00,0.00,0.00,anomaly 0,tcp,http,SF,254,9066,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,223,0.87,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,163,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,1445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,284,2251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,37,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,7,1.00,1.00,0.00,0.00,0.35,0.20,0.00,255,47,0.18,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,2,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,2,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,347,636,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,31,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,54,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,1,0.00,0.00,0.00,0.00,0.07,0.33,0.00,255,1,0.00,0.48,0.67,0.00,0.00,0.00,0.33,0.00,anomaly 0,tcp,http,SF,312,3749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,38,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,8,1.00,0.00,1.00,0.38,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,150,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,1663,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,193,1.00,0.00,0.04,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,ftp,SF,1297,2453,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,38,0.15,0.02,0.00,0.00,0.07,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,4,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,155,1.00,0.00,1.00,0.06,0.00,0.00,1.00,0.73,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,2,0.00,0.00,0.00,0.00,0.09,0.32,0.00,255,2,0.01,0.22,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,shell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,189,0.74,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp,SF,1225,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,130,0.51,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,346,1,0.00,0.00,1.00,1.00,0.00,0.52,0.00,255,1,0.00,0.52,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,226,519,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,24,1.00,1.00,0.00,0.00,0.63,0.08,0.00,255,24,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,152,8157,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,2833,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,21,0.70,0.13,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,7669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,80,255,1.00,0.00,0.03,0.03,0.00,0.01,0.01,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,11,1.00,1.00,0.00,0.00,0.26,0.09,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 22,tcp,ftp,SF,329,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,57,0.22,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,12,0.97,1.00,0.03,0.00,0.32,0.11,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,417,3294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,247,1.00,0.00,0.01,0.11,0.00,0.00,0.08,0.47,normal 0,tcp,http,SF,285,788,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,16726,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,86,0.59,0.07,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,143,1.00,0.00,0.50,0.25,0.00,0.00,1.00,1.00,normal 1,tcp,http,S2,364,646196,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,15,0.50,0.07,0.00,0.00,1.00,0.00,0.13,110,255,1.00,0.00,0.01,0.08,0.01,0.00,0.15,0.52,normal 0,tcp,http,SF,216,7103,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,193,255,1.00,0.00,0.01,0.01,0.01,0.01,0.01,0.00,normal 0,tcp,http,SF,339,1035,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,39,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,18,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,11455,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,discard,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.12,0.00,0.86,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,508,1,0.07,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.91,1.00,anomaly 27,tcp,smtp,SF,905,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,149,196,0.83,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,13225,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,8,1.00,1.00,0.00,0.00,0.28,0.14,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,133,0.00,0.00,0.00,0.00,0.93,0.01,0.00,255,201,0.79,0.03,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,17,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,6,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,216,1144,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,3,255,1.00,0.00,0.33,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,2,1.00,1.00,0.00,0.00,0.09,0.09,0.00,44,6,0.09,0.07,0.07,0.33,0.95,0.33,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,15,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,343,3102,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.08,0.00,0.00,1.00,0.00,0.17,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,20,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,506,1,0.08,0.00,0.89,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,94,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,94,0.37,0.02,0.37,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,257,4084,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,1424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,28,0.00,0.00,0.00,0.00,1.00,0.00,0.18,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,4,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,214,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,114,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,41,37,0.90,0.05,0.02,0.00,0.00,0.00,0.90,1.00,normal 0,tcp,http,SF,297,1468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,178,437,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,5,0.02,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,42,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,1408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,345,607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,322,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,1,0,0,0,5,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,63,0.21,0.02,0.21,0.03,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,238,1064,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 27,tcp,smtp,SF,12778,1396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,79,166,0.90,0.06,0.01,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,300,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1038,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,172,0.75,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,4069,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,26,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,138,0.54,0.01,0.54,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,980,330,0,0,0,0,0,1,0,0,0,0,2,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,169,150,0.89,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,7,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,1606,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,11,1.00,1.00,0.00,0.00,0.32,0.12,0.00,255,51,0.20,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,258,8745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,16,1.00,1.00,0.00,0.00,0.53,0.07,0.00,255,60,0.24,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,3081,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,174,0.75,0.50,0.25,0.01,0.00,0.00,0.00,0.00,normal 397,tcp,smtp,SF,2405,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,67,0.20,0.32,0.00,0.03,0.00,0.00,0.30,0.00,normal 0,tcp,http,SF,230,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,9,1.00,1.00,0.00,0.00,0.24,0.11,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.20,0.00,0.78,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.27,0.00,0.73,1.00,anomaly 0,tcp,http,SF,312,3040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,8,0.00,0.00,0.00,0.00,0.50,0.19,0.00,255,8,0.03,0.30,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,19,1.00,1.00,0.00,0.00,0.16,0.08,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.91,0.90,0.00,0.00,0.00,0.90,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,755,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,121,0.47,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,4,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,145,0.57,0.04,0.57,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,2,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,197,11312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.11,1.00,0.00,0.33,2,255,1.00,0.00,0.50,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,20,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,18,1.00,1.00,0.00,0.00,0.29,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,4,0.12,0.06,0.12,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,218,12640,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,21,0.33,0.05,0.00,0.00,1.00,0.00,0.14,64,255,1.00,0.00,0.02,0.02,0.02,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.21,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,107,0.44,0.04,0.44,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2099,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,200,117,0.43,0.03,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 4,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,117,37,0.21,0.04,0.21,0.05,0.03,0.00,0.00,0.00,normal 4,tcp,smtp,SF,933,334,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,184,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,19,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 17297,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 2,tcp,smtp,SF,2067,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,188,0.74,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,2823,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,96,128,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,77,223,0.82,0.03,0.82,0.01,0.00,0.00,0.10,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,49,1.00,0.00,0.20,0.18,0.00,0.00,1.00,1.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,250,2791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,116,116,1.00,0.00,0.01,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,http,SF,312,9284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,20,0.08,0.05,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,normal 525,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.74,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,16,0.00,0.00,1.00,1.00,0.18,0.08,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,14,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,14,0.05,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,196,578,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,488,488,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,14,1.00,0.00,1.00,0.50,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,141,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,280,0.00,0.00,0.00,0.00,1.00,0.01,0.00,170,137,0.81,0.01,0.37,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,259,1542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,1165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,51,1.00,0.00,0.08,0.24,0.00,0.00,1.00,0.98,normal 1,tcp,smtp,SF,851,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,175,158,0.59,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,8,127,1.00,0.00,0.12,0.33,0.00,0.01,1.00,0.99,normal 1,tcp,ftp,SF,1255,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,133,0.52,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1452,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,98,0.56,0.25,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,4,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,41,0.47,0.12,0.47,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,984,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,169,0.68,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,138,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,247,0.97,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,41,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,4,1.00,1.00,0.00,0.00,0.50,0.38,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,289,594,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,17,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,155,1,0.01,0.14,0.23,0.00,0.00,0.00,0.23,1.00,anomaly 0,tcp,http,SF,235,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,255,1.00,0.00,0.01,0.04,0.00,0.00,0.02,0.01,normal 0,tcp,http,SF,278,2736,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,16,1.00,1.00,0.00,0.00,0.21,0.07,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,13,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,2109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,49,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,1363,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,1,0.06,0.00,0.00,0.00,0.06,0.69,0.00,255,1,0.00,0.05,0.44,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,9,1.00,1.00,0.00,0.00,0.04,0.05,0.00,18,9,0.50,0.17,0.06,0.00,0.89,1.00,0.00,0.00,anomaly 0,tcp,X11,SF,12,56,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,11,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,239,2125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,77,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,262,8702,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,12,255,1.00,0.00,0.08,0.13,0.00,0.00,1.00,0.79,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,24,0.09,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 6,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,11,1.00,0.00,0.09,0.00,0.00,0.00,0.45,0.45,anomaly 0,tcp,http,SF,317,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,4080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,235,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 28,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,0.33,0.67,0.43,113,108,0.96,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,925,479,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,1,0.00,0.00,0.00,0.00,0.04,0.09,0.00,255,8,0.03,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,287,1808,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,6546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,240,0.94,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,168,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,168,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 38426,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,224,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,195,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 13335,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.66,0.96,0.00,0.00,0.00,0.00,0.00,normal 63,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,42,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,19,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,172,0.67,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,5,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,107,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,246,225,0.91,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,smtp,SF,1284,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,66,54,0.61,0.09,0.02,0.04,0.02,0.00,0.08,0.00,normal 0,tcp,ftp_data,SF,8325,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,101,0.40,0.02,0.40,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,http,SF,232,32617,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,342,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,14,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,445,445,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,209,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,234,16,0.07,0.07,0.00,0.00,0.94,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,154,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,14,1.00,1.00,0.00,0.00,0.52,0.07,0.00,255,72,0.28,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,2807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 13417,tcp,telnet,SF,986,144411,0,0,0,0,0,1,789,1,2,867,0,0,2,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,224,37,0.17,0.03,0.00,0.00,0.00,0.03,0.01,0.05,normal 0,udp,domain_u,SF,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,121,62,0.24,0.04,0.24,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,96,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,25,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,59,219,1.00,0.00,0.02,0.16,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,12,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,12,0.05,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,189,15028,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,31,1.00,0.00,0.50,0.10,0.00,0.00,1.00,1.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,8,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,27,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,8,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,87,0.49,0.09,0.49,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,193,28696,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,4137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,1.00,1.00,0.00,0.00,1.00,0.00,0.00,100,60,0.60,0.02,0.01,0.00,0.98,0.97,0.00,0.00,anomaly 0,tcp,http,S1,220,13140,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,1039,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,338,9755,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,117,0.46,0.01,0.46,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,14,1.00,1.00,0.00,0.00,0.13,0.08,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,19572,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,75,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,1963,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,28,1,0.04,1.00,0.04,0.00,0.00,0.00,0.96,1.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,17,0.07,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,131,255,1.00,0.00,0.01,0.08,0.01,0.00,0.20,0.52,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,24,1.00,1.00,0.00,0.00,0.23,0.06,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,338,776,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,111,1.00,0.00,0.09,0.14,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,18,0.07,0.01,0.07,0.00,0.78,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,15,255,1.00,0.00,0.13,0.04,0.07,0.00,0.00,0.00,normal 27,tcp,ftp,SF,885,2586,0,0,0,18,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,49,0.19,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,1.00,1.00,0.00,0.00,1.00,0.00,0.00,111,131,0.44,0.02,0.01,0.02,0.98,0.37,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,276,359,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,14,1.00,0.00,0.50,0.14,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,189,732,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,395,760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,259,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 8610,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.52,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,8,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S2,256,15968,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,24,1.00,0.04,0.00,0.00,1.00,0.00,0.08,179,255,1.00,0.00,0.01,0.01,0.01,0.00,0.01,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,23,1.00,1.00,0.00,0.00,0.16,0.04,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,17,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,193,1,0.66,1.00,0.34,0.00,0.01,0.41,0.00,255,1,0.00,0.31,0.76,0.00,0.50,1.00,0.26,0.00,anomaly 0,tcp,smtp,SF,741,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,207,241,0.95,0.01,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,120,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,68,0.00,0.00,0.00,0.00,0.99,0.03,0.00,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,19,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,60,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,60,0.24,0.64,0.24,0.00,0.01,0.00,0.52,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,54,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,10,1.00,1.00,0.00,0.00,0.43,0.17,0.00,255,65,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,4,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,19,0.00,0.00,1.00,1.00,0.17,0.07,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,4,0.00,0.00,0.00,0.00,0.22,0.28,0.00,255,24,0.09,0.68,0.42,0.00,0.00,0.00,0.58,0.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.98,0.97,0.00,0.00,0.00,0.97,1.00,anomaly 0,tcp,http,SF,223,1664,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.25,0.20,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,331,5337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S1,574,11913,0,0,0,0,0,1,0,0,0,0,3,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,171,18,0.11,0.04,0.01,0.00,0.02,0.11,0.08,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,5,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 22841,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.71,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,341,8867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1786,478,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,14,1.00,1.00,0.00,0.00,0.12,0.08,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,280,24971,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,23,232,1.00,0.00,0.04,0.06,0.00,0.00,0.57,0.62,normal 0,tcp,http,SF,294,1389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,3714,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,2781,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,137,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,1026,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,57,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,57,0.22,0.02,0.22,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,330,584,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,2808,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,104,18,0.17,0.12,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,12,1.00,1.00,0.00,0.00,0.10,0.08,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,112,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,223,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,7,425,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,8,0.03,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,161,0.00,0.00,0.00,0.00,0.99,0.02,0.01,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,3,1.00,1.00,0.00,0.00,0.38,0.25,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,23,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,13,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.76,0.76,1.00,0.00,0.00,36,116,1.00,0.00,0.03,0.17,0.00,0.00,0.89,0.97,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,27,0.11,0.05,0.11,0.00,0.31,0.00,0.02,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.01,0.05,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,8,1.00,1.00,0.00,0.00,0.21,0.11,0.00,120,31,0.25,0.03,0.03,0.06,0.98,0.90,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,827,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,17,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,34,0.13,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,10,1.00,1.00,0.00,0.00,0.42,0.17,0.00,104,30,0.29,0.04,0.04,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,49,0.25,0.02,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,385,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,51,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,192,626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,9,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,4,0.33,0.25,0.00,0.00,1.00,0.00,0.50,45,255,1.00,0.00,0.04,0.06,0.02,0.01,0.00,0.00,normal 0,tcp,http,SF,329,1032,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,11,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,11,0.04,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,170,52838,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.03,1.00,0.97,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,22,255,1.00,0.00,0.05,0.10,0.00,0.00,1.00,0.80,normal 0,udp,domain_u,SF,31,31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,9,8,0.89,0.22,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,20165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,12,1.00,1.00,0.00,0.00,0.24,0.08,0.00,255,57,0.22,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,381,381,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,172,0.67,0.02,0.67,0.00,0.00,0.00,0.25,0.00,anomaly 0,tcp,http,SF,222,1680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 17904,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,286,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1208,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.64,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,75,0.30,0.03,0.30,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,2518,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,116,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,1426,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,6,255,1.00,0.00,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,464,10134,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,255,1.00,0.00,0.01,0.09,0.00,0.00,0.16,0.56,normal 0,tcp,ftp_data,SF,607,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,83,0.86,0.29,0.86,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,8,1.00,1.00,0.00,0.00,0.47,0.29,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,394,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,38,27,0.71,0.05,0.03,0.00,0.00,0.00,0.71,1.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,312,311,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 7,tcp,smtp,SF,1489,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,138,0.59,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,397,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,http,SF,219,19309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,4057,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,18,0.00,0.00,0.00,0.00,1.00,0.00,0.33,33,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,1397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,132,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,139,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,224,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 454,tcp,telnet,RSTR,492,14334,0,0,0,2,0,1,2,1,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,38,13,0.34,0.11,0.05,0.00,0.00,0.00,0.05,0.15,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,12,1.00,1.00,0.00,0.00,0.52,0.09,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,20,1.00,1.00,0.00,0.00,0.27,0.05,0.00,235,62,0.26,0.02,0.01,0.03,0.99,0.97,0.00,0.00,anomaly 0,udp,domain_u,SF,43,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.95,1.00,0.05,1.00,0.00,0.10,2,199,1.00,0.00,0.50,0.27,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,42,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,158,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,42,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,285,4036,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,845,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,173,0.55,0.23,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10044,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,18,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,173,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,341,1394,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,245,453,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,44,0.06,0.05,0.00,0.02,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,RSTR,54060,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.20,0.20,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,http,SF,350,3205,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,14,255,1.00,0.00,0.07,0.06,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,32,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,56,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,198,6136,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,7,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,7,0.03,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,134,0.53,0.01,0.53,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,330,240,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,1603,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,44,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,167,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,http,SF,309,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,105,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,148,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 121,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,325,325,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,rje,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,10,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,965,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.02,0.04,0.00,0.00,0.00,0.82,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,5,1.00,1.00,0.00,0.00,0.50,0.40,0.00,255,66,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,21,1.00,1.00,0.00,0.00,0.09,0.04,0.00,102,21,0.21,0.08,0.01,0.00,0.98,1.00,0.00,0.00,anomaly 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,16,1.00,1.00,0.00,0.00,0.10,0.08,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,790,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,51,51,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,18,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,18278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.50,1.00,0.00,0.75,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,anomaly 0,tcp,http,SF,216,3166,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,12,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,25,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,233,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 25,udp,domain_u,SF,45,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,87,60,0.69,0.02,0.63,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,81,255,1.00,0.00,0.01,0.09,0.00,0.00,1.00,1.00,normal 9658,tcp,telnet,SF,499,3551,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,53,0.21,0.02,0.00,0.00,0.58,0.74,0.00,0.00,normal 39910,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,118,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,1043,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,252,1.00,0.00,0.12,0.08,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,307,307,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,1010,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,23,0.23,0.22,0.00,0.00,1.00,0.00,0.17,30,255,1.00,0.00,0.03,0.02,0.07,0.01,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,269,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,38,1.00,0.00,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,31011,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 3,tcp,pop_3,SF,38,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,33,4,0.09,0.18,0.03,0.50,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,41,41,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,195,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,21,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,13,1.00,1.00,0.00,0.00,0.24,0.07,0.00,255,64,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,41,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,167,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,779,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,60,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,105,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,227,0.89,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1461,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,62,98,0.27,0.05,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,4,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,18,0.07,0.02,0.07,0.00,0.00,0.00,0.78,0.00,normal 0,tcp,other,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,112,1,0.01,0.07,0.15,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,302,1728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1577,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,103,214,0.64,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,124,255,1.00,0.00,0.02,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,262,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,http,SF,288,3193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,232,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,12689,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,255,1.00,0.00,0.00,0.01,0.00,0.00,0.05,0.05,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,9,0.04,0.01,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,3,0.01,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,8,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,17,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,5,0.02,0.11,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3775,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,130,0.55,0.02,0.55,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,18,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,266,7546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,351,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,342,2851,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,38,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,16,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,16,0.06,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,276,308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,23,1.00,1.00,0.00,0.00,0.16,0.04,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,355,254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,151,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 19,tcp,telnet,SF,149,7976,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,2,0.01,0.04,0.01,1.00,0.03,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,170,8,0.05,0.07,0.01,0.00,0.92,1.00,0.01,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,3,13,0.33,0.67,0.33,0.54,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,SF,10,39,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,125,8,0.02,0.03,0.01,0.25,0.00,0.00,0.01,0.75,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,15,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,1,0.06,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,0.80,0.00,0.00,0.05,0.00,0.70,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,29,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,250,1.00,0.00,1.00,0.33,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,306,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,7405,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.06,0.00,0.00,0.00,0.01,normal 0,tcp,ftp_data,SF,1874,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.02,0.40,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,289,8822,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,33,0.00,0.00,0.00,0.00,1.00,0.00,0.09,141,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,151,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,71,0.28,0.14,0.36,0.03,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,212,5397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,10,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 1,tcp,finger,SF,8,223,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,12,0.06,0.02,0.01,0.25,0.01,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.11,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.15,0.00,0.85,1.00,anomaly 0,udp,domain_u,SF,43,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,201,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,163,404,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,86,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,299,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,73,0.44,0.04,0.44,0.00,0.01,0.00,0.38,0.00,anomaly 0,tcp,http,SF,322,998,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,33,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,124,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,3632,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.06,0.00,0.00,0.00,0.04,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 28,tcp,ftp,SF,1169,3380,0,0,0,24,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,42,0.16,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,303,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.19,0.00,0.81,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.84,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.22,0.00,0.76,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.82,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,255,1.00,0.00,0.01,0.04,0.00,0.00,0.20,0.41,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,13,1.00,1.00,0.00,0.00,0.10,0.06,0.00,82,13,0.16,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,149,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,149,0.58,0.01,0.58,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,492,492,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,79,0.46,0.04,0.46,0.00,0.01,0.00,0.36,0.00,anomaly 0,tcp,http,SF,303,1783,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,83,1.00,0.00,0.10,0.10,0.00,0.00,0.00,0.02,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,20,0.08,0.02,0.08,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,323,3805,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,9,1.00,0.89,0.00,0.00,0.06,0.06,0.22,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3584,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.68,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,103,0.83,0.33,0.83,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 13288,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.69,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 3,tcp,smtp,SF,1782,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,141,0.46,0.02,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,91,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 5048,tcp,ftp_data,SF,5135678,0,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,39,1.00,0.00,1.00,0.13,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,251,2716,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,210,0.82,0.03,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,35,1.00,0.00,0.03,0.00,0.03,0.03,0.03,0.03,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,10,0.00,0.00,1.00,1.00,0.06,0.08,0.00,255,10,0.04,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,175,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,175,0.69,0.01,0.69,0.00,0.00,0.00,0.00,0.00,anomaly 33,tcp,ftp,SF,1417,4145,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,39,0.27,0.03,0.01,0.00,0.02,0.08,0.00,0.00,normal 0,tcp,http,SF,225,526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,293,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,131,1.00,0.00,1.00,0.18,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,1,0.00,0.00,0.89,1.00,0.05,1.00,0.00,255,1,0.00,0.11,0.00,0.00,0.00,0.00,0.07,1.00,anomaly 0,tcp,http,SF,331,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 27481,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,231,1550,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,249,255,1.00,0.00,0.00,0.02,0.00,0.00,0.34,0.36,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,158,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,10,0.04,0.11,0.10,0.00,0.00,0.00,0.10,0.10,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,8,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,28,0.11,0.06,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 36,tcp,smtp,SF,638,339,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,229,174,0.68,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,4858,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,13,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,2147,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,4137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1537,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,104,164,0.60,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,2219,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,37,0.15,0.06,0.00,0.00,0.00,0.00,0.83,0.00,normal 0,tcp,http,SF,244,770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,13,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,15,0.00,0.00,1.00,1.00,0.17,0.07,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,SF,103,292,0,0,0,1,4,0,0,0,0,0,2,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,117,2,0.02,0.11,0.01,0.00,0.00,0.00,0.03,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,2,0.00,0.00,0.00,0.00,0.22,0.33,0.00,255,5,0.02,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,16,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,5,0.02,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1424,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,124,0.40,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2052,394,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,17,207,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,21,1.00,1.00,0.00,0.00,0.07,0.04,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,234,224,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,2,1.00,1.00,0.00,0.00,0.08,0.12,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,2531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,68,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,9,48,1.00,0.00,0.11,0.25,0.00,0.00,1.00,0.98,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.15,0.00,0.00,1.00,0.80,normal 0,tcp,http,SF,234,710,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,17,0.00,0.00,1.00,1.00,0.14,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,82,0.32,0.10,0.95,0.00,0.00,0.00,0.05,0.00,anomaly 0,tcp,http,SF,323,3675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,79,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,1162,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,240,255,1.00,0.00,0.00,0.01,0.00,0.00,0.04,0.04,normal 0,tcp,http,SF,280,1538,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,33,0.00,0.00,0.00,0.00,1.00,0.00,0.12,36,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,20,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,IRC,S1,39908,42841,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,58,9,0.16,0.03,0.02,0.00,0.12,0.78,0.00,0.00,normal 19,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,1010,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,14,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.03,0.00,0.00,1.00,0.03,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,smtp,SF,866,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,72,217,0.94,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,102,0.16,0.14,0.16,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,9,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,161,13352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,68,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,2,0.00,0.00,1.00,1.00,0.02,0.07,0.00,28,2,0.07,0.14,0.04,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,12,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,211,2570,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,67,0.00,0.00,0.00,0.00,1.00,0.00,0.06,144,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,8,0.00,0.00,0.00,0.00,0.17,0.08,0.00,255,19,0.07,0.60,0.42,0.00,0.16,0.00,0.42,0.00,anomaly 0,tcp,http,SF,229,855,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,79,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,31,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.56,0.55,0.00,0.00,0.00,0.55,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,955,333,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,199,0.90,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2018,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,24,149,0.25,0.17,0.04,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,104,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,121,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,167,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,20,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.19,0.00,0.01,1.00,0.99,normal 0,tcp,ftp_data,SF,8737,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,37,0.25,0.03,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,277,537,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,108,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,15,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,270,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,264,19085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.07,0.07,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,6,1.00,1.00,0.00,0.00,0.32,0.21,0.00,255,8,0.03,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,17,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,854,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,102,192,0.95,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.15,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,493,3294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,40494,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,130,0.51,0.01,0.51,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,smtp,SF,973,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,106,45,0.42,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,0.82,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.07,0.00,0.00,1.00,0.97,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.57,0.57,1.00,0.00,0.00,25,111,1.00,0.00,0.04,0.17,0.00,0.01,0.96,0.86,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,16,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,914,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,128,0.48,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,40,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,623,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,137,0.59,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 1464,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.57,0.00,255,3,0.01,0.50,0.82,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.44,0.42,0.00,0.00,0.00,0.42,1.00,anomaly 0,tcp,http,SF,207,3048,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,1190,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,23,1.00,1.00,0.00,0.00,0.09,0.04,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,5,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,19,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,13,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,1133,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,144,0.67,0.04,0.01,0.02,0.00,0.00,0.05,0.03,normal 0,tcp,http,SF,162,8284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 9645,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,2,0.01,0.53,0.80,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,291,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,2989,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,17,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,1396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,224,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,14,0.00,0.00,1.00,1.00,0.12,0.07,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,19,0.86,1.00,0.00,0.00,0.10,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,2057,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2362,374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,2,0.00,0.00,0.00,0.00,0.14,0.29,1.00,86,244,0.98,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,11,1.00,1.00,0.00,0.00,0.09,0.07,0.00,116,11,0.09,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,23,1.00,1.00,0.00,0.00,0.62,0.08,0.00,255,23,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,145,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,195,4086,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,185,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,5989,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,21048,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.33,0.33,1.00,0.00,0.00,94,94,1.00,0.00,0.01,0.00,0.00,0.00,0.16,0.16,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,150,0.59,0.02,0.59,0.00,0.00,0.00,0.02,0.00,anomaly 0,tcp,http,SF,311,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,8,1.00,1.00,0.00,0.00,0.33,0.17,0.00,255,36,0.14,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.17,0.00,0.00,1.00,0.86,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,1.00,1.00,0.00,0.00,0.33,0.67,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,190,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,527,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,8702,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.08,0.33,0.00,0.00,0.00,normal 0,tcp,http,SF,329,9621,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,25,1.00,1.00,0.00,0.00,0.08,0.04,0.00,254,25,0.10,0.06,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1102,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,1,0.00,0.00,0.00,0.00,0.04,0.08,0.00,150,125,0.46,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,9,0.00,0.00,0.00,0.00,0.16,0.07,0.00,255,9,0.04,0.23,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 12,tcp,ftp_data,SF,7045,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,35,1.00,0.00,1.00,0.14,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,276,13283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,12,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,217,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,26,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,18,0.00,0.00,0.00,0.00,0.82,0.09,0.00,255,23,0.09,0.71,0.33,0.00,0.06,0.00,0.61,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,18,0.07,0.18,0.07,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,189,0.00,0.00,0.00,0.00,1.00,0.00,0.02,179,196,0.78,0.02,0.68,0.01,0.00,0.00,0.08,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.23,0.00,0.00,1.00,0.95,normal 0,tcp,http,SF,403,4355,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,41,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,226,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,130,119,0.92,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,495,0,0,0,0,0,0,1,0,0,0,5,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,120,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,281,2751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,102,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,144,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,14,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,27,0.11,0.01,0.51,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,4,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,15,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,15,0.06,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,211,2530,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,13,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,2302,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,197,146,0.74,0.03,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,smtp,SF,12022,1430,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,191,0.70,0.01,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,241,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,10,0.00,0.10,0.17,0.10,1.00,0.00,0.20,15,255,1.00,0.00,0.07,0.03,0.00,0.00,0.07,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,20,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,500,1,0.07,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,5124,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,5,1.00,1.00,0.00,0.00,0.21,0.17,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,4170,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.59,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,12,1.00,1.00,0.00,0.00,0.22,0.07,0.00,255,40,0.16,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,707,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,39,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,10,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,3,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,1,0.00,0.00,0.00,0.00,0.04,0.25,0.00,255,1,0.00,0.66,0.44,0.00,0.00,0.00,0.56,0.00,anomaly 0,tcp,http,SF,308,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,149,0.86,0.02,0.01,0.00,0.01,0.01,0.01,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,457,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,1596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,20,0.00,0.00,0.00,0.00,1.00,0.00,0.25,40,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,2,26,1.00,0.00,0.50,0.12,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,110,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,205,95839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.04,0.01,0.01,0.01,0.00,normal 0,tcp,http,SF,291,29325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,162,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,2,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,2,0.01,0.71,0.38,0.00,0.00,0.00,0.62,0.00,anomaly 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,134,0.53,0.01,0.53,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,155,10121,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,161,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,120,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,273,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,608,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,508,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,178,0.70,0.16,0.70,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,154,0.60,0.03,0.60,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,37,2,0.03,1.00,0.03,1.00,0.00,0.00,0.89,1.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,110,1.00,0.00,1.00,0.49,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,19,1.00,1.00,0.00,0.00,0.07,0.04,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1985,524,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,46,136,0.11,0.04,0.02,0.01,0.00,0.00,0.89,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,51,50,0.98,0.04,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,40,52,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,244,0.96,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,506,10848,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,328,1263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,SF,14,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.69,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,186,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1101,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,152,99,0.65,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,415,235,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,113,181,1.00,0.00,0.01,0.10,0.00,0.00,1.00,1.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,46,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,227,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,888,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,60,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,6,1.00,1.00,0.00,0.00,0.46,0.15,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,20,0.08,0.05,0.08,0.00,0.34,0.00,0.02,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,173,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,15876,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,97,0.38,0.03,0.38,0.02,0.00,0.00,0.00,0.00,normal 40403,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.42,0.84,0.00,0.00,0.00,0.84,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,2280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,36,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5775,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,157,41901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,9,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,3,1.00,0.00,0.67,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,285,17602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,226,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,1,0.00,0.00,1.00,1.00,0.01,0.54,0.00,240,1,0.00,0.16,0.29,0.00,0.01,0.00,0.50,1.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,46,43,0.93,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,6,0.02,0.08,0.02,0.00,0.59,0.00,0.01,0.00,anomaly 0,tcp,http,SF,316,1138,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,363,2690,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.10,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,262,11829,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,55,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,299,2605,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,19,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,55,0.22,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0.50,0.40,0.00,0.00,1.00,0.00,0.60,121,171,1.00,0.00,0.02,0.02,0.01,0.01,0.00,0.01,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,6,1.00,1.00,0.00,0.00,0.18,0.15,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,1327,372,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,130,0.51,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,95,0.09,0.14,0.09,0.02,0.05,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,148,14506,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,2,0.99,1.00,0.00,0.00,0.02,0.09,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,889,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,241,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,373,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,88,0.78,0.33,0.78,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,130,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,72,1,0.01,0.86,0.89,0.00,0.89,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,148,0.00,0.00,0.00,0.00,0.98,0.03,0.02,255,191,0.75,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4892,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,20,0.08,0.07,0.08,0.00,0.86,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,99,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,18,1,0.06,0.72,0.56,0.00,0.56,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,11094,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,46,231,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,18,1.00,1.00,0.00,0.00,0.07,0.04,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,1370,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,208,135,0.65,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,209,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,65,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.02,0.25,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,228,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,250,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,163,30042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,821,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,163,22886,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,IRC,SF,76,18,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,10,0.26,0.05,0.03,0.00,0.00,0.00,0.13,0.50,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,13,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,13,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,176,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,232,4,0.02,0.07,0.00,0.00,0.94,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.11,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.12,0.00,0.88,1.00,anomaly 0,tcp,http,SF,296,24695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,32,255,1.00,0.00,0.03,0.03,0.00,0.02,0.16,0.03,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,2,0.20,1.00,0.20,1.00,0.00,0.00,0.80,1.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,249,71,0.29,0.03,0.29,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,1.00,1.00,0.00,0.00,0.33,0.33,0.00,255,42,0.16,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.06,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,402,402,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,20,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,smtp,SF,858,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,141,111,0.26,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,22,1.00,1.00,0.00,0.00,0.09,0.04,0.00,204,22,0.11,0.06,0.00,0.00,0.99,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,1370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,7,1.00,1.00,0.00,0.00,0.32,0.14,0.00,255,62,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,247,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 9,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,236,0.93,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,141,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,119,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,7,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,7,1.00,1.00,0.00,0.00,0.33,0.19,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,86,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 210,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.84,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,1,0.00,0.00,0.00,0.00,0.09,0.82,0.00,255,1,0.00,0.73,0.35,0.00,0.03,0.00,0.63,0.00,anomaly 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,18,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,20,1.00,1.00,0.00,0.00,0.18,0.06,0.00,112,20,0.18,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,16,0.00,0.00,1.00,1.00,0.15,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,865,400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,155,0.63,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,176,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,233,3510,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,12,255,1.00,0.00,0.08,0.20,0.00,0.00,0.08,0.96,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,75,0.29,0.03,0.29,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,19,0.00,0.00,1.00,1.00,0.14,0.07,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,19,1.00,1.00,0.00,0.00,0.13,0.04,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,450,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 12,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.25,0.25,1.00,0.00,0.00,19,19,1.00,0.00,0.05,0.00,0.00,0.00,0.42,0.42,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,136,13,0.10,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,11,1.00,1.00,0.00,0.00,0.16,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 16,tcp,smtp,SF,947,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,28,0.76,0.08,0.03,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,pop_3,SF,6,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,507,1,0.06,0.00,0.93,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,0.00,anomaly 0,tcp,http,SF,243,7432,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,276,25868,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.33,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,174,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,32,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 14517,tcp,telnet,SF,794,152110,0,0,0,0,0,1,520,1,2,572,0,0,8,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,3,0.38,0.25,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,1.00,1.00,0.00,0.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.08,1.00,0.92,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,9,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.09,0.00,0.00,0.65,0.71,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,192,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,5166,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,45,0.39,0.03,0.39,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,ftp,SF,1138,2443,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,70,0.27,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,23,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,25,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2269,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.85,0.97,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,6,0.01,0.06,0.01,0.33,0.00,0.00,0.02,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.15,0.00,0.00,1.00,0.79,normal 0,tcp,http,SF,352,11580,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2314,338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,230,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,8317,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,64,254,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,279,8936,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,22,0.00,0.05,0.00,0.00,1.00,0.00,0.32,35,255,1.00,0.00,0.03,0.05,0.00,0.00,0.03,0.01,normal 0,tcp,http,SF,256,3397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,879,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,122,0.50,0.02,0.50,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,finger,SF,6,1405,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,2,0.00,0.00,0.00,0.00,0.25,0.62,0.00,152,4,0.03,0.06,0.01,0.00,0.01,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,112,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,213,1565,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,70,1.00,0.00,0.02,0.04,0.00,0.01,0.00,0.07,normal 0,tcp,http,SF,179,816,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,161,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,23,1.00,1.00,0.00,0.00,0.17,0.04,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,4,0.02,0.04,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,15,0.00,0.00,1.00,1.00,0.12,0.07,0.00,49,15,0.31,0.12,0.02,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,4,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.18,0.00,0.82,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.93,1.00,anomaly 0,tcp,http,SF,294,16407,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,21,253,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,109,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.02,normal 45,tcp,X11,SF,5097472,87532,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,21,0.62,0.09,0.03,0.00,0.03,0.05,0.03,0.05,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,470,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.90,1.00,anomaly 0,tcp,http,SF,227,484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,225,22047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.05,0.05,0.00,0.00,1.00,0.00,0.00,119,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 3795,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.67,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,8,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,12,0.05,0.10,0.03,0.25,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,3480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,70,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 6070,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,4,0.02,0.62,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,17,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,58,0.23,0.03,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.33,0.26,0.00,0.26,0.00,0.27,1.00,anomaly 0,tcp,http,SF,250,8467,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,37,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,368,1,0.06,1.00,0.92,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,1.00,0.91,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,97,0.50,1.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,17,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp,SF,1218,2447,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,71,0.28,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,19,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,17,1.00,1.00,0.00,0.00,0.17,0.06,0.00,155,17,0.11,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,1116,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,54,60,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTR,53208,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,4,3,0.00,0.00,0.25,0.33,0.75,0.50,0.00,72,72,1.00,0.00,0.01,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,http,RSTR,45908,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,2,2,1.00,0.00,0.50,0.00,0.00,0.00,0.50,0.50,anomaly 0,tcp,http,SF,246,4320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,20,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,195,4740,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,50,0.98,0.04,0.02,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1008,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,161,187,0.72,0.03,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,240,2230,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,272,962,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,29,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,15377,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,85,0.50,0.04,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,163,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,312,6775,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,1808,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.12,0.12,0.00,0.00,1.00,0.00,0.00,126,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,22,219,1.00,0.00,0.05,0.16,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,201,5347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5319,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,10,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,107,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,231,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.26,0.01,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,231,36322,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,39,255,1.00,0.00,0.03,0.16,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,309,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,801,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,43,255,1.00,0.00,0.02,0.03,0.00,0.00,0.09,0.03,normal 0,tcp,http,SF,345,4047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,3957,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,158,0.62,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,13125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,1893,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,215,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,18,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,22,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.02,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,15,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,3,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,3,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,183,0.00,0.00,0.00,0.00,0.99,0.02,0.01,253,212,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,166,166,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,http,SF,290,37009,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.92,1.00,0.00,0.96,0.00,255,1,0.00,0.91,0.00,0.00,0.05,0.00,0.95,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,10,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,242,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.11,0.00,0.00,1.00,0.86,normal 0,tcp,http,SF,231,31230,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,276,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,177,45,0.25,0.03,0.25,0.00,0.00,0.00,0.05,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,391,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,http,SF,323,2025,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,6,255,1.00,0.00,0.17,0.02,0.00,0.01,0.00,0.01,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,228,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,11,1.00,1.00,0.00,0.00,0.50,0.09,0.00,182,54,0.28,0.02,0.01,0.04,1.00,0.94,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,91,1.00,0.00,1.00,0.49,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,248,4196,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,132,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,93,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,93,0.36,0.02,0.36,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,4,0.96,0.00,0.00,0.00,0.04,0.07,0.00,255,4,0.02,0.99,0.02,0.00,0.09,0.00,0.90,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,18,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,11376,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,85,0.35,0.09,0.40,0.02,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,195,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,42,44,0.00,0.00,0.00,0.00,1.00,0.00,0.07,43,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,77,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,11,200,1.00,0.00,0.09,0.14,0.00,0.00,1.00,1.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,6,0.00,0.00,0.00,0.00,0.23,0.09,0.33,255,26,0.10,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.06,0.00,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,19471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.50,0.25,0.00,0.00,1.00,0.00,0.50,28,255,1.00,0.00,0.07,0.02,0.07,0.01,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,3,0.01,0.01,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,78,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,20,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,255,1.00,0.00,0.00,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,256,1151,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,111,1,0.01,0.69,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2612,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,154,0.60,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,486,486,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,141,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,210,526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,35949,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.06,0.00,0.94,1.00,0.00,0.96,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,http,SF,339,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,253,245,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,13,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1153,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,170,0.61,0.05,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,16,1.00,1.00,0.00,0.00,0.19,0.07,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,8,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,13,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,131,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,6943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2096,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,57,238,0.93,0.07,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,854,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,78,0.83,0.17,0.83,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,68,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,162,433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,0.19,2,255,1.00,0.00,0.50,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,882,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,38,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,171,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,72160,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,39,0.15,0.02,0.15,0.00,0.56,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.20,0.00,0.79,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.27,0.00,0.73,1.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,226,87,0.37,0.02,0.37,0.02,0.00,0.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,7,0.00,0.00,0.00,0.00,0.19,0.05,0.00,255,25,0.10,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,11,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1199,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,77,0.52,0.05,0.52,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,6892,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,318,1676,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,45,0.00,0.00,0.00,0.00,1.00,0.00,0.07,36,255,1.00,0.00,0.03,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,16,0.06,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,4,1.00,1.00,0.00,0.00,0.67,0.33,0.00,255,16,0.06,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,162,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,17,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,193,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,19,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,34,0.12,0.05,0.12,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,180,0.00,0.00,0.00,0.00,0.99,0.01,0.00,212,179,0.84,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,18805,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,208,0.82,0.03,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,20,0.99,1.00,0.00,0.00,0.14,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,2670,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,5,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,348,2350,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,1.00,1.00,0.00,0.00,0.40,0.40,0.00,255,62,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,44,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,97,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,286,844,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,39,0.00,0.00,0.00,0.00,1.00,0.00,0.13,77,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,175337,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,95,0.37,0.02,0.37,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,15,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,186,182,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,329,2576,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 8621,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.57,0.94,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,6,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,10,0.05,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9515,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,1211,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,165,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,16,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,3308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,47,0.00,0.00,0.00,0.00,1.00,0.00,0.13,50,255,1.00,0.00,0.02,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,6,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.29,0.27,0.00,0.00,0.00,0.27,1.00,anomaly 0,tcp,http,SF,345,713,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,205,1.00,0.00,0.03,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,339,383,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,28,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,2,0.00,0.00,0.00,0.00,0.08,0.08,0.00,255,9,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,357,1081,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,11,1.00,1.00,0.00,0.00,0.22,0.08,0.00,255,64,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,0,467968,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,15,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,63,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,7,1.00,1.00,0.00,0.00,0.58,0.17,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,164,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,7956,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,11,1.00,0.00,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,15,1.00,1.00,0.00,0.00,0.08,0.08,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,16,1.00,1.00,0.00,0.00,0.22,0.05,0.00,255,69,0.27,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,20,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 770,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,231,1,0.00,0.58,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,141,7373,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.04,0.00,0.01,0.00,0.01,normal 0,tcp,http,SF,289,808,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,157,237,1.00,0.00,0.01,0.05,0.01,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,5,1.00,1.00,0.00,0.00,0.16,0.09,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,25,1.00,0.00,1.00,0.12,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,244,2619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,31,0.00,0.00,0.00,0.00,1.00,0.00,0.13,31,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,8,0.97,1.00,0.03,0.00,0.28,0.17,0.00,255,27,0.11,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,509,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,165,0.65,0.16,0.65,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,193,2430,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.50,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,605,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,156,0.47,0.07,0.02,0.01,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,358,2804,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,6,357,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,16,0.00,0.00,1.00,1.00,0.12,0.06,0.00,106,16,0.15,0.08,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,SF,3775,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,1,0.00,0.00,0.00,0.00,0.05,0.23,0.00,100,1,0.01,0.07,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,1150,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.36,10,62,1.00,0.00,0.10,0.11,0.00,0.00,0.00,0.03,normal 0,tcp,http,SF,241,382,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,20,1.00,1.00,0.00,0.00,0.21,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,2031,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.14,0.00,0.00,1.00,0.98,normal 0,tcp,http,SF,271,10462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,98,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,23,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,2408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,61,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,9,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,165,7,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,148,35,0.20,0.05,0.20,0.06,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,218,0.00,0.00,0.00,0.00,1.00,0.00,0.00,215,121,0.56,0.03,0.56,0.00,0.01,0.00,0.29,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,51,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 168,tcp,telnet,SF,217,38761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,5,1.00,0.00,1.00,0.40,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,17,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,185,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,71,0.65,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,link,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,16,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,281,272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,276,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,17,0.08,0.05,0.08,0.12,0.01,0.00,0.02,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,26,26,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,202,2488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,27,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,2013,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,168,0.95,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,21,1.00,1.00,0.00,0.00,0.15,0.04,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,20,1.00,1.00,0.00,0.00,0.50,0.05,0.00,240,60,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,38125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,10,255,1.00,0.00,0.10,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,330,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,telnet,SF,104,2085,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,2,0.01,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,40,1.00,0.00,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,3,1.00,1.00,0.00,0.00,0.11,0.11,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.07,0.07,0.00,0.00,1.00,0.00,0.00,196,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 4134,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.44,0.84,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,10194,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,1,0.11,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.88,1.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,8,1.00,1.00,0.00,0.00,0.05,0.05,0.00,97,8,0.08,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.14,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,324,3326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,2017,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,36,0.00,0.00,0.00,0.00,1.00,0.00,0.08,48,255,1.00,0.00,0.02,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,10,1.00,0.00,1.00,0.20,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,335,335,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,1,1.00,1.00,0.00,0.00,0.10,0.40,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,191,1528,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,7488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,1480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,40,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,313,1292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,64,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,256,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,17,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,40,1.00,0.00,1.00,0.15,0.00,0.03,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,224,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.12,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.87,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,764,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,18,0.00,0.00,0.00,0.00,1.00,0.00,0.33,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,32,0.27,0.08,0.27,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,10318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,195,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,19,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,130,1,0.01,0.63,0.63,0.00,0.05,0.00,0.62,1.00,anomaly 0,tcp,http,SF,245,1481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,126,243,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,65,0.13,0.59,0.01,0.03,0.01,0.00,0.55,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,2,0.71,0.50,0.29,0.50,0.01,0.37,0.00,255,2,0.01,0.21,0.56,0.00,0.40,0.50,0.16,0.50,anomaly 0,tcp,http,SF,239,273,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,51,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,38,8,0.21,0.13,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.56,0.54,0.00,0.00,0.00,0.54,1.00,anomaly 0,tcp,http,SF,207,2596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 9,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,276,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,95,0.38,0.05,0.40,0.02,0.03,0.00,0.00,0.00,normal 0,tcp,http,SF,310,6072,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,373,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,66,0.21,0.09,0.21,0.03,0.00,0.02,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,8,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,24,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,2006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,2275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.01,0.00,0.00,0.00,0.00,normal 37007,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,115,0.45,0.01,0.57,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,11415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,233,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,183,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,30,0.12,0.01,0.13,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,197,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,260,4428,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,874,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,112,136,0.56,0.05,0.01,0.01,0.04,0.01,0.00,0.00,normal 0,tcp,smtp,SF,1048,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,127,0.59,0.06,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,104,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,209,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,61,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,16,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,331,946,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,168,3030,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,205,1395,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,111,0.00,0.00,0.00,0.00,0.99,0.02,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,187,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,300,760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,75,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.45,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,20,0.99,1.00,0.00,0.00,0.16,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,16,0.00,0.00,1.00,1.00,0.12,0.08,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,15,1.00,1.00,0.00,0.00,0.21,0.06,0.00,255,57,0.22,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,152,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,10,1.00,1.00,0.00,0.00,0.13,0.06,0.00,230,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,102,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,232,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,633,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,165,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,154,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,12,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,10,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,154,38649,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,21,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,72,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,172,0.67,0.33,0.67,0.00,0.09,0.00,0.24,0.00,anomaly 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,155,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,104,255,1.00,0.00,0.01,0.11,0.00,0.00,1.00,1.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,246,1903,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,255,1.00,0.00,0.02,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,25,1.00,1.00,0.00,0.00,0.17,0.04,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,21,1.00,1.00,0.00,0.00,0.14,0.04,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,190,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,8,0.03,0.02,0.03,0.00,0.00,0.00,0.83,0.00,normal 251,tcp,telnet,SF,90,3302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,35,0.19,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,191,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,1103,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,159,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,191,0.75,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,10,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,11,0.00,0.00,1.00,1.00,0.13,0.08,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,13,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,9,1.00,1.00,0.00,0.00,0.75,0.17,0.00,255,62,0.24,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,154,60,0.39,0.05,0.39,0.00,0.01,0.00,0.41,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,217,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,SF,10,39,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,11,0.06,0.06,0.01,0.18,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,6,0.50,0.50,0.50,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,12,0.92,1.00,0.08,0.00,0.92,0.15,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,2313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,882,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,33586,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,9009,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,36,0.00,0.00,0.00,0.00,1.00,0.00,0.06,28,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,25,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,889,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,161,95,0.54,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,5,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,153,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,49,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,149,0.58,0.42,0.58,0.00,0.09,0.00,0.33,0.00,anomaly 0,tcp,http,SF,289,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,163,19983,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,11,1.00,1.00,0.00,0.00,0.24,0.09,0.00,255,65,0.25,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,195,1947,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,17,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,138,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,202,0.79,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,144,10209,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,1,0.01,0.00,0.95,1.00,0.01,1.00,0.00,253,1,0.00,0.53,0.00,0.00,0.00,0.00,0.49,1.00,anomaly 0,tcp,http,SF,302,6542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,53,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1970,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,146,135,0.50,0.05,0.01,0.01,0.02,0.02,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,15,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,183,5080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,255,1.00,0.00,0.01,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,846,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,83,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,3591,449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,108,230,0.95,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,11,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,33,0.22,0.03,0.22,0.00,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,208,0.82,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,28,0.11,0.05,0.11,0.00,0.31,0.00,0.02,0.00,anomaly 0,tcp,http,SF,316,1962,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,203,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,449,449,0.00,0.00,0.00,0.00,1.00,0.00,0.00,173,173,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,351,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,499,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,2070,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.20,0.00,0.00,1.00,0.89,normal 0,tcp,http,SF,230,8753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,43,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,7,0.88,1.00,0.00,0.00,0.88,0.25,0.00,7,8,1.00,0.00,0.14,0.25,1.00,0.88,0.00,0.00,anomaly 0,tcp,http,SF,146,3846,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,10111,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,20,0.00,0.00,0.00,0.00,1.00,0.00,0.25,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.93,1.00,anomaly 0,tcp,http,SF,238,2063,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,75,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,321,1735,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,204,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,57,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,11,4,0.36,0.18,0.09,0.00,0.00,0.00,0.36,1.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,29,0.21,0.02,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,15,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,2858,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,254,791,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,746,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,18,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,7,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,453,1,0.08,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,http,SF,308,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,30,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,220,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1702,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,166,0.55,0.07,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10261,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,50,0.37,0.10,0.43,0.04,0.01,0.02,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,7,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,810,389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,39,0.15,0.06,0.00,0.00,0.74,0.00,0.01,0.00,normal 0,tcp,http,SF,274,15342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,49,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,6,0.97,1.00,0.03,0.00,0.19,0.16,0.00,255,27,0.11,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,234,4200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,84,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,19,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.61,0.61,0.00,0.00,0.00,0.61,1.00,anomaly 0,tcp,http,SF,225,16193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,208,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,205,199,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 40142,tcp,nntp,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.47,0.93,0.00,0.00,0.00,0.93,1.00,anomaly 0,tcp,http,SF,326,418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,38,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,1605,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,22934,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,7,1.00,1.00,0.00,0.00,0.06,0.08,0.00,60,7,0.12,0.13,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 10,tcp,smtp,SF,2039,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,134,146,0.71,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,1560,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,336,12265,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,16,1.00,1.00,0.00,0.00,0.13,0.06,0.00,91,6,0.07,0.12,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,4,0.00,0.00,1.00,1.00,0.03,0.08,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,353,2011,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,29,255,1.00,0.00,0.03,0.02,0.03,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,147,1,0.01,0.67,0.67,0.00,0.04,0.00,0.64,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,32,117,0.62,0.16,0.06,0.02,0.03,0.01,0.00,0.00,normal 0,tcp,http,SF,305,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,2,0.05,0.11,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1393,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,82,0.72,0.05,0.01,0.00,0.02,0.02,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,500,500,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,63,1.00,0.00,1.00,0.05,0.00,0.00,1.00,0.03,anomaly 0,tcp,http,SF,296,11016,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,2,0.00,0.00,0.00,0.00,0.12,0.24,0.00,255,46,0.18,0.29,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1342,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,3,0.00,0.00,0.00,0.00,0.75,0.50,0.00,228,94,0.41,0.01,0.41,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.42,0.42,0.00,0.00,0.00,0.42,1.00,anomaly 0,tcp,http,SF,295,2649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,319,302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,331,685,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.04,0.03,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,20,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,253,65,0.26,0.02,0.26,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,313,1,0.10,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.90,1.00,anomaly 0,tcp,http,SF,288,2506,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,168,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,44,11,1.00,1.00,0.00,0.00,0.25,0.09,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,15,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,389,824,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,46,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,121,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2565,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,1362,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,88,0.67,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,1249,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,92,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,1571,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.02,normal 0,tcp,smtp,SF,1262,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,185,0.97,0.06,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,129,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,69,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,1.00,0.01,0.50,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.20,0.33,1.00,0.00,0.33,100,100,1.00,0.00,0.01,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,20,0.00,0.00,1.00,1.00,0.22,0.07,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,9,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S1,82,2374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,10,0.04,0.68,0.00,0.00,0.68,0.20,0.00,0.00,normal 0,tcp,http,SF,300,22055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,11,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,25,1.00,0.00,1.00,0.56,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,244,4145,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,10609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,16,0.00,0.00,0.08,0.06,1.00,0.00,0.19,40,255,1.00,0.00,0.03,0.04,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,198,450,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,198,201,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,320,1737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.41,0.78,0.00,0.00,0.00,0.22,0.00,anomaly 0,tcp,http,SF,281,5325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,8422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,8484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,12,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,7,0.00,0.00,0.00,0.00,0.64,0.18,0.00,255,7,0.03,0.42,0.70,0.00,0.03,0.00,0.27,0.00,anomaly 0,tcp,smtp,SF,1908,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,134,0.81,0.09,0.02,0.01,0.00,0.00,0.00,0.00,normal 10,tcp,telnet,SF,141,1310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,1,0.06,0.12,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,4,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,114,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,21,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,16,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1598,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.75,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,258,676,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.12,0.00,0.00,1.00,0.79,normal 0,tcp,ftp_data,SF,40494,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,45,0.42,0.06,0.42,0.04,0.01,0.00,0.03,0.00,normal 0,tcp,http,SF,358,409,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,22,0.00,0.05,0.00,0.00,1.00,0.00,0.18,48,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,9,19,0.00,0.05,0.00,0.00,1.00,0.00,0.37,253,239,0.94,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,868,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,127,183,0.72,0.06,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,334,667,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,16,1.00,1.00,0.00,0.00,0.26,0.08,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 30418,tcp,uucp,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,10,212,1.00,0.00,0.10,0.18,0.00,0.00,1.00,0.98,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,18,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,471,1,0.06,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.90,1.00,anomaly 0,tcp,http,SF,198,1328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,998,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,142,0.62,0.04,0.01,0.01,0.01,0.01,0.00,0.00,normal 20,tcp,telnet,SF,117,8172,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,185,0.73,0.03,0.73,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,90,0.97,0.06,0.97,0.33,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,17,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,206,1707,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,231,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,139,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,709,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,255,1.00,0.00,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,152,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,172,2595,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,339,454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,453,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,320,25948,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,16,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,194,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,16,0.06,0.07,0.06,0.12,0.01,0.00,0.00,0.00,normal 3,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.33,0.00,0.67,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.24,0.00,0.76,1.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,25,1.00,1.00,0.00,0.00,0.27,0.04,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,1,0.00,0.00,0.00,0.00,0.08,0.15,0.00,255,9,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,7,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,19,1.00,0.95,0.00,0.05,1.00,0.00,0.11,18,18,1.00,0.00,0.06,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,16,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,246,4498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,10,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,20,1.00,1.00,0.00,0.00,0.16,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,1,0.11,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.89,1.00,anomaly 0,tcp,smtp,SF,646,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,151,0.93,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,5,1.00,1.00,0.00,0.00,0.07,0.07,0.00,247,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1511,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,51,0.44,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,180,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,4763,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,1,0.10,0.00,0.00,0.00,0.10,0.20,0.00,223,1,0.00,0.02,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,381,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,121,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,193,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,105,0.41,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,13,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,13,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,13,0.05,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,283,1769,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,368,1747,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,48,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.09,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.86,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,25,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,147,2447,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,21,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,582,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,134,0.48,0.03,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,244,1041,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,210,255,1.00,0.00,0.00,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,327,7156,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.11,0.00,0.00,1.00,0.79,normal 0,tcp,http,SF,279,1169,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,42,139,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,37,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,12040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1005,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,91,114,0.48,0.07,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,112,0.44,0.02,0.44,0.00,0.02,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,146,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,11,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,189,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,59,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,1,0.04,0.00,0.00,0.00,0.04,0.78,0.00,195,1,0.01,0.11,0.42,0.00,0.01,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,102,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.02,0.40,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,12,1.00,1.00,0.00,0.00,0.26,0.09,0.00,255,52,0.20,0.03,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,15,1.00,1.00,0.00,0.00,0.23,0.06,0.00,146,36,0.24,0.03,0.02,0.06,1.00,0.97,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,16,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,189,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.33,0.33,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,141,1,0.01,0.93,0.94,0.00,0.94,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,2757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,10,0.00,0.00,0.00,0.00,1.00,0.00,0.40,33,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,2363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,9,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,1301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,1117,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,48,230,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,158,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,8,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,34557,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,32,255,1.00,0.00,0.03,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5929,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,94,0.48,0.02,0.48,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,253,1.00,0.00,0.25,0.06,0.00,0.00,1.00,0.55,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,110,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,17,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,17,26,1.00,0.00,0.06,0.23,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,344,2839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,255,1.00,0.00,0.00,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,290,492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,51,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,305,0.00,0.00,0.00,0.00,1.00,0.01,0.01,230,191,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,248,373,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.04,0.25,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,6,1.00,1.00,0.00,0.00,0.24,0.16,0.00,255,60,0.24,0.04,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,242,13292,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,2,1.00,1.00,0.00,0.00,0.11,0.32,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1713,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,190,0.75,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,4,1.00,1.00,0.00,0.00,0.17,0.17,0.00,255,41,0.16,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,8,1.00,1.00,0.00,0.00,0.27,0.10,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,216,0.85,0.09,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.18,0.06,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,16,0.10,0.06,0.10,0.12,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,1774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,11,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,1147,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,3,255,1.00,0.00,0.33,0.01,0.00,0.00,0.33,0.01,normal 1,tcp,smtp,SF,1095,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,120,124,0.57,0.07,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,19,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,439,439,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,184,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,70,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,229,2658,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,20,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,290,2747,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,59,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,903,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,51,26,0.51,0.08,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,34,41,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,6,0.98,1.00,0.00,0.00,0.06,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,12,1.00,1.00,0.00,0.00,0.12,0.08,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,342,5421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,19,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,223,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,1758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,7,491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,9,0.02,0.02,0.01,0.22,0.00,0.00,0.03,0.22,normal 0,tcp,ftp_data,SF,1766,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,71,1.00,0.00,1.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,410,10161,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,245,1.00,0.00,0.01,0.20,0.00,0.00,0.18,0.78,normal 12,tcp,ftp_data,SF,7045,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,27,1.00,0.00,1.00,0.19,0.00,0.00,0.00,0.00,anomaly 1990,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,85,217,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,190,170,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,32,47,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,21,1.00,1.00,0.00,0.00,0.14,0.04,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,3,0.00,0.00,0.00,0.00,0.60,0.40,0.00,255,77,0.30,0.01,0.38,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,3845,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,18,0.00,0.00,0.00,0.06,1.00,0.00,0.17,6,255,1.00,0.00,0.17,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,16918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.03,0.00,0.00,0.00,0.00,normal 191,tcp,telnet,SF,241,1888,0,0,0,0,0,1,6,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,8,0.03,0.09,0.00,0.00,0.83,0.38,0.01,0.25,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1038,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,136,0.45,0.08,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,13,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,4,1.00,1.00,0.00,0.00,0.06,0.09,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,1408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,25,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,49,0.19,0.06,0.19,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,1,0.00,0.00,0.00,0.00,0.10,0.20,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,IRC,S1,259,1213,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,25,10,0.40,0.08,0.04,0.00,0.16,0.40,0.16,0.40,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,20,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.13,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.93,1.00,anomaly 0,udp,domain_u,SF,43,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,50,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,144,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,X11,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,1.00,0.50,1.00,0.00,115,1,0.01,0.03,0.01,0.00,0.00,0.00,0.01,1.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,1615,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,11,0.00,0.00,0.00,0.00,1.00,0.00,0.36,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,329,984,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,106,0.32,0.09,0.32,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,326,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,198,0.78,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,64983,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,670,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,12,33,0.75,0.25,0.08,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,10,0.04,0.53,0.01,0.00,0.00,0.10,0.00,0.00,normal 0,tcp,ftp_data,SF,9178,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,69,0.73,0.04,0.73,0.03,0.00,0.01,0.00,0.00,normal 3,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,1,0.04,0.00,0.94,1.00,0.00,1.00,0.00,255,1,0.00,0.94,0.00,0.00,0.04,0.00,0.87,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,8,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,8,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,21,1.00,0.00,0.05,0.00,0.14,0.14,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,11,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,298,356,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,46,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,1,0.00,0.00,0.00,0.00,0.07,0.67,0.00,255,1,0.00,0.06,0.09,0.00,0.00,0.00,0.78,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,5,0.00,0.00,1.00,1.00,0.04,0.09,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 4,tcp,smtp,SF,878,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,96,194,0.88,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.51,0.49,0.00,0.00,0.00,0.50,1.00,anomaly 0,tcp,http,SF,239,8134,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.06,0.00,0.00,0.00,0.00,normal 620,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,3,0.01,0.55,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,213,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,439,0,0,0,0,0,0,1,0,0,0,4,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,212,80,0.38,0.02,0.38,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,4,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,299,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,39,0.00,0.00,0.00,0.00,1.00,0.00,0.10,92,255,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,1487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,225,1,0.00,0.96,0.96,0.00,0.96,1.00,0.00,0.00,anomaly 0,tcp,http,SF,290,2448,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,28,0.00,0.00,0.00,0.00,1.00,0.00,0.14,142,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,12712,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,56,0.67,0.33,0.67,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,375,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 1,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,14,1.00,0.00,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,163,1.00,0.00,0.01,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,http,SF,188,1274,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,11,1.00,1.00,0.00,0.00,0.12,0.08,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,289,16978,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,3530,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,41,33,0.80,0.12,0.02,0.00,0.02,0.03,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,740,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,43,6,0.14,0.09,0.14,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.34,0.67,0.00,0.00,0.00,0.67,1.00,anomaly 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,100,0.39,0.02,0.39,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S1,217,35040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,1.00,0.50,0.00,0.00,1.00,0.00,1.00,3,254,1.00,0.00,0.33,0.02,0.33,0.00,0.00,0.00,normal 0,tcp,http,SF,306,560,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,87,1.00,0.00,0.09,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,17,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,17,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,211,1357,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.00,normal 24,tcp,ftp,SF,232,769,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,46,0.22,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,747,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,18,0.20,0.04,0.20,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,319,4309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,252,1.00,0.00,0.02,0.07,0.02,0.01,0.00,0.00,normal 0,tcp,http,SF,224,3707,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,47,0.00,0.00,0.00,0.00,1.00,0.00,0.04,87,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,259,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,24,0.15,0.06,0.15,0.12,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,1530,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,18,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,25,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,24,1.00,1.00,0.00,0.00,0.10,0.04,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.02,0.00,0.00,0.00,0.00,0.04,0.04,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,9,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,160,4437,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,44,255,1.00,0.00,0.02,0.01,0.00,0.00,0.02,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,52,0.17,0.06,0.17,0.04,0.00,0.02,0.00,0.00,normal 0,tcp,http,SF,227,424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,23,0.09,0.62,0.01,0.00,0.00,0.04,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,83,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,19,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,36,0.84,0.07,0.84,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,1415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,90,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,32,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,206,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.01,0.89,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,225,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.02,1.00,0.98,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,66,2,0.03,0.15,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,435,1,0.08,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,http,SF,249,746,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,47,0.00,0.00,0.00,0.00,1.00,0.00,0.09,218,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,202,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.61,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,218,4767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,168,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,4,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,263,0.00,0.00,0.00,0.00,0.99,0.01,0.01,188,149,0.79,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,84,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,13,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,8737,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,254,60,0.24,0.13,0.33,0.00,0.02,0.02,0.00,0.00,normal 0,tcp,http,SF,284,170,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,17,1.00,1.00,0.00,0.00,0.27,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,9,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,196,765,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,2251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,10726,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,11,255,1.00,0.00,0.09,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,347,3718,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,52,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,12471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.67,72,47,0.65,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,177,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 11,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,229,0.90,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,90,0.67,0.03,0.67,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,2,0.64,0.50,0.36,0.50,0.01,0.42,0.00,255,2,0.01,0.35,0.83,0.00,0.53,0.50,0.30,0.50,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 299,tcp,telnet,SF,112,847,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,48,0.19,0.02,0.00,0.00,0.22,0.31,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,45,1.00,0.00,0.02,0.00,0.00,0.00,0.04,0.04,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,178,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,13,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,33,0.13,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,122,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,48,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,ftp_data,SF,832,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,15,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,99,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,domain,SF,48,244,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,1,0.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,46,0.00,0.00,0.00,0.00,0.63,0.05,0.00,255,110,0.43,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,SF,6,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,4,0.04,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,15,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,269,8921,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.03,0.00,0.02,0.01,0.03,normal 0,tcp,http,SF,192,248,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,239,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,184,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.09,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,3057,343,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,7,146,0.86,0.29,0.14,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,16,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,131,0.51,0.01,0.51,0.00,0.00,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,378,378,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,297,2635,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,29,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,23,0.09,0.02,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,55,0.24,0.03,0.24,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,942,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,84,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,29,0.11,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,9,1.00,0.00,1.00,0.56,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,8,0.50,0.25,0.00,0.00,1.00,0.00,0.62,36,255,1.00,0.00,0.06,0.05,0.03,0.00,0.00,0.00,normal 0,tcp,http,SF,300,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,5975,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,132,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,10,1.00,0.80,0.00,0.00,1.00,0.00,0.30,30,142,0.27,0.07,0.03,0.01,0.93,0.06,0.00,0.00,anomaly 0,tcp,smtp,SF,1286,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,1,0.20,0.60,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,2663,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,24,0.00,0.00,0.00,0.00,1.00,0.00,0.21,141,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,191,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,26,165,1.00,0.00,0.04,0.23,0.00,0.00,0.65,0.94,normal 0,tcp,http,SF,300,561,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,123,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,65,3,0.05,0.05,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,190,1490,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,2510,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,25,0.00,0.00,0.00,0.00,1.00,0.00,0.20,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,57,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,16,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,2091,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,106,173,0.63,0.06,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,230,774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,51,0.00,0.02,0.00,0.00,1.00,0.00,0.06,97,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,6,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,smtp,SF,204766,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,18,194,1.00,0.00,0.06,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,6,1.00,0.00,1.00,0.33,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1611,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,85,170,0.72,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,187,6402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.11,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,tcp,http,SF,319,1713,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 5682,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.68,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,165,22461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,1,255,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,1,0,0,0,6,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,110,0.43,0.02,0.44,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.01,0.00,0.99,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.01,0.00,0.99,1.00,anomaly 0,tcp,http,SF,229,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.14,0.00,0.00,1.00,0.00,0.43,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,120,9,0.08,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,5,1.00,1.00,0.00,0.00,0.20,0.16,0.00,187,47,0.25,0.02,0.01,0.00,0.99,0.96,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,81,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.17,0.00,0.83,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,ftp_data,SF,16115,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,61,0.30,0.02,0.30,0.00,0.00,0.00,0.00,0.00,normal 25,tcp,smtp,SF,1276,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,172,182,0.68,0.08,0.01,0.01,0.01,0.00,0.03,0.04,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,76,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,23,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,4,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1136,340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,180,0.64,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,241,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,11889,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,226,226,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,520,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1594,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,81,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,263,501,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,534,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,37,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,10,1.00,1.00,0.00,0.00,0.24,0.10,0.00,255,61,0.24,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTR,53776,7300,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.67,0.67,1.00,0.00,0.00,70,70,1.00,0.00,0.01,0.00,0.00,0.00,0.20,0.20,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,78,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,304,1680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,7,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,214,5320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,1579,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,298,461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 7158,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.42,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,270,6771,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,102,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,5019,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,39,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.02,0.00,0.00,0.00,0.08,0.00,0.00,normal 0,tcp,imap4,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,123,1.00,0.76,0.00,0.04,1.00,0.00,0.37,8,8,1.00,0.00,0.75,0.00,0.62,0.62,0.00,0.00,anomaly 0,tcp,http,SF,214,3370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,12,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,288,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1411,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,245,157,0.64,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,9765,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,342,753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,204,204,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,143,0.56,0.04,0.56,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,323,903,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,44,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,342,12009,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,3226,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,216,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,49,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,188,0.74,0.01,0.74,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,211,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,293,185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2620,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,183,0.72,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,X11,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,3,0.00,0.00,0.75,1.00,0.75,0.50,0.00,120,6,0.05,0.03,0.01,0.00,0.00,0.00,0.05,1.00,normal 0,tcp,http,SF,330,914,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,255,1.00,0.00,0.01,0.03,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,305,759,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,125,1,0.01,0.05,0.04,0.00,0.00,0.00,0.04,1.00,anomaly 0,tcp,http,SF,246,1860,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,3594,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,61,61,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,261,3834,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 4,tcp,ftp_data,SF,832,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,35,1.00,0.00,1.00,0.11,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,292,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 842,tcp,ftp,SF,1059,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,59,0.26,0.32,0.00,0.00,0.00,0.00,0.29,0.02,normal 11,tcp,smtp,SF,1477,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,126,88,0.70,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,20,1.00,1.00,0.00,0.00,0.14,0.04,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7940,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,21,0.18,0.03,0.18,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,17,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,12,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,17,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,17,0.07,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,11390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,388,138,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,297,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,186,784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 16872,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.48,0.68,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,13,2,0.08,1.00,0.08,1.00,0.00,0.00,0.77,1.00,anomaly 0,tcp,http,SF,219,6912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,10,1.00,1.00,0.00,0.00,0.13,0.08,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,12,1.00,1.00,0.00,0.00,0.10,0.07,0.00,233,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,16,47,1.00,0.00,0.06,0.21,0.00,0.00,1.00,1.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,222,139,0.58,0.02,0.58,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,305,8181,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,29,0.00,0.00,0.00,0.00,1.00,0.00,0.10,110,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,189,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,21,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,21,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,20,0.83,0.08,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,17,17,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,256,4486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.67,1.00,0.00,1.00,237,223,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,3542,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,331,924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,50,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,6,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,338,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,100,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 4685,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.66,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,102,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,4,0.00,0.00,1.00,1.00,0.03,0.07,0.00,93,4,0.04,0.09,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,227,5175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.07,0.00,0.02,0.00,0.00,normal 0,udp,domain_u,SF,43,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,215,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,15,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,39,0.15,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,162,1,0.01,0.70,0.70,0.00,0.04,0.00,0.63,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,119,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,15,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,98,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,89,0.75,0.03,0.75,0.02,0.01,0.00,0.19,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,209,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,9,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,35,0.00,0.00,0.00,0.00,1.00,0.00,0.06,178,178,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,191,491,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,252,1.00,0.00,0.50,0.20,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,44,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,60,55,0.92,0.03,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,6,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.05,0.00,0.00,0.56,0.00,0.01,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,19,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S3,12984,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,191,47,0.10,0.06,0.14,0.04,0.03,0.06,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,327,349,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,113,1.00,0.00,0.04,0.09,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,252,2416,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1445,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,87,0.55,0.07,0.01,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,202,1497,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,2683,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,19,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1342,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,162,0.61,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,341,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,18,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 7,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,205,3978,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,21,1.00,1.00,0.00,0.00,0.15,0.04,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 31,tcp,ftp,SF,1525,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,20,0.13,0.05,0.01,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,RSTR,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.50,0.67,1.00,0.00,0.50,255,255,1.00,0.00,0.01,0.00,0.01,0.01,0.04,0.04,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,13,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,288,15621,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,767,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,10,33,0.70,0.30,0.10,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,17,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,313,25517,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1031,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,26,0.10,0.06,0.00,0.00,0.00,0.00,0.87,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,382,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,78,0.35,0.01,0.35,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,25,0.10,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.33,0.33,1.00,0.00,0.00,3,255,1.00,0.00,0.67,0.03,0.00,0.00,0.33,0.01,normal 0,tcp,http,SF,194,6396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,2,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,9,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1194,391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,87,0.34,0.05,0.00,0.00,0.40,0.00,0.05,0.02,normal 0,tcp,http,SF,300,1197,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,21,0.33,0.10,0.00,0.00,1.00,0.00,0.19,7,255,1.00,0.00,0.14,0.03,0.14,0.00,0.00,0.00,normal 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,18,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,205,3433,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,35,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 26768,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,129,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,14,1.00,1.00,0.00,0.00,0.10,0.04,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,259,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.03,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,689,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,11,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,115,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,25,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,129,0.84,0.01,0.84,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,148,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,231,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,15,1.00,1.00,0.00,0.00,0.33,0.09,0.00,255,35,0.14,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,10,0.00,0.00,1.00,1.00,0.14,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,26,239,1.00,0.00,0.04,0.12,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,317,2186,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,19,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 22,tcp,ftp,SF,286,903,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,41,0.26,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,1,0.17,0.67,0.83,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,340,1529,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,38,0.00,0.05,0.00,0.00,1.00,0.00,0.05,69,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,290,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,221,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,2,0.65,0.50,0.35,0.50,0.01,0.41,0.00,255,2,0.01,0.31,0.76,0.00,0.50,0.50,0.26,0.50,anomaly 0,tcp,http,SF,188,585,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,238,0.93,0.01,0.00,0.00,0.00,0.00,0.05,0.05,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,90,194,1.00,0.00,0.01,0.03,0.00,0.00,1.00,1.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,39,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,44,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,120,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,12,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,153,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3888,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,56,0.34,0.04,0.34,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,276,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,165,83,0.39,0.03,0.39,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,8,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,18,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,93,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.33,0.00,0.00,0.00,0.33,0.67,0.00,255,3,0.01,0.53,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,91,1.00,0.00,1.00,0.45,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,23,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,193,0.76,0.15,0.76,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,1,0.69,1.00,0.31,0.00,0.01,0.39,0.00,255,1,0.00,0.25,0.64,0.00,0.44,1.00,0.20,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,85,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,8,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,8,0.03,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,4279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,5,0.00,0.00,0.00,0.00,0.14,0.29,0.40,255,23,0.09,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,379,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,189,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,682,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,203,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,12,1,0.08,1.00,0.08,0.00,0.00,0.00,0.83,1.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,ftp,SF,1236,2450,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,86,0.34,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,308,579,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,77,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,10,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,RSTO,267,2920,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.33,0.33,1.00,0.00,0.00,125,255,1.00,0.00,0.01,0.03,0.01,0.01,0.01,0.01,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 14462,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,2,1.00,1.00,0.00,0.00,0.14,0.21,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,35,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp,SF,1265,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,58,0.23,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.28,0.28,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,256,9,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,175,1462,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,35,0.00,0.00,0.00,0.00,1.00,0.00,0.09,26,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 3,tcp,telnet,SF,106,2880,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,5,0.03,0.04,0.01,0.60,0.00,0.20,0.00,0.00,normal 0,icmp,red_i,SF,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,5,0.04,0.02,0.04,0.00,0.00,0.00,0.11,0.00,normal 0,tcp,http,SF,303,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,206,2118,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,228,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,12,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,57,0.22,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,15,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,174,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,950,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,255,1.00,0.00,0.00,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,2152,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,32,0.00,0.00,0.00,0.00,1.00,0.00,0.16,25,39,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.03,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,93,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,4,1.00,0.00,0.25,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,139,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,41,0.16,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.05,0.06,normal 0,tcp,http,SF,205,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,120,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,297,798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,33,0.00,0.00,0.00,0.00,1.00,0.00,0.06,22,254,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,1,0.10,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.87,1.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,1,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,17,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.52,0.50,0.00,0.00,0.00,0.51,1.00,anomaly 14,tcp,smtp,SF,1570,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,83,0.39,0.02,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,15,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,13,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,262,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,19,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,298,5931,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,16,0.00,0.00,1.00,1.00,0.30,0.06,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,70,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,37,0.15,0.01,0.15,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,458,6452,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,udp,domain_u,SF,44,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,229,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,5,1.00,1.00,0.00,0.00,0.24,0.19,0.00,103,28,0.24,0.04,0.03,0.07,0.98,0.89,0.00,0.00,anomaly 0,tcp,smtp,SF,1700,441,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,84,0.33,0.05,0.00,0.00,0.31,0.00,0.02,0.00,normal 0,tcp,ftp_data,SF,1470,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,98,51,0.41,0.06,0.41,0.04,0.01,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,418,6726,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,245,1.00,0.00,0.01,0.17,0.00,0.00,0.13,0.69,normal 0,tcp,http,SF,322,1564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,2714,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,171,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,155,3368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,6329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,34,0.00,0.03,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,114,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,134,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,156,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,7897,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,19,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,1,0.11,0.00,0.89,1.00,0.02,1.00,0.00,255,1,0.00,0.53,0.00,0.00,0.03,0.00,0.24,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,5,0.99,1.00,0.00,0.00,0.04,0.09,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.20,0.00,0.80,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,tcp,http,SF,310,9515,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,23,255,1.00,0.00,0.04,0.02,0.04,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1272,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,210,128,0.61,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,1832,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 275,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.55,0.87,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,18,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9841,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,233,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.14,1.00,0.00,0.29,255,237,0.93,0.02,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,6,0.00,0.00,1.00,1.00,0.04,0.07,0.00,61,6,0.10,0.10,0.02,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,313,267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,RSTO,126,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,14,14,1.00,0.00,0.07,0.00,0.07,0.07,0.93,0.93,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,126,13,0.10,0.08,0.01,0.00,0.98,1.00,0.00,0.00,anomaly 0,tcp,http,SF,292,8258,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,45,0.00,0.00,0.00,0.00,1.00,0.00,0.04,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1805,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,193,167,0.56,0.02,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,965,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,137,101,0.58,0.02,0.58,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,237,0.93,0.02,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,217,674,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.28,0.27,0.00,0.00,0.00,0.27,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,169,3973,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.10,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,17,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,16787,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,9,8,0.00,0.00,0.00,0.00,0.89,0.22,0.00,144,18,0.12,0.03,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,2904,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,2312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,235,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,32,1,0.03,0.72,0.75,0.00,0.75,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,8,241,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,208,0.82,0.03,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,156,0.61,0.01,0.61,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,9,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,204,152,0.58,0.02,0.01,0.01,0.00,0.02,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,139,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,36,96,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1490,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,36,0.30,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,196,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,160,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,632,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,43,126,1.00,0.00,0.02,0.21,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,314,288,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,0.17,4,255,1.00,0.00,0.25,0.01,0.25,0.00,0.00,0.00,normal 0,tcp,http,SF,342,888,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,17,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,18,1.00,1.00,0.00,0.00,0.37,0.08,0.00,255,67,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,262,1323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,4046,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,21,0.33,0.05,0.00,0.00,1.00,0.00,0.14,43,255,1.00,0.00,0.02,0.03,0.07,0.01,0.00,0.00,normal 0,tcp,http,SF,203,1704,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,1259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,484,484,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,1279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,21,255,1.00,0.00,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,217,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,255,220,0.86,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1073,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,211,165,0.74,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 5,tcp,smtp,SF,1408,351,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,138,0.83,0.09,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,129,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,237,987,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,151,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,37,0.33,0.07,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,3,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,727,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,13,1.00,1.00,0.00,0.00,0.33,0.10,0.00,255,63,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,1609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,57,231,1.00,0.00,0.02,0.09,0.00,0.00,0.25,0.63,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,94,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,45,0.11,0.03,0.11,0.04,0.01,0.02,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,smtp,SF,579,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,170,0.67,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,18,0.07,0.01,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,821,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,21,1.00,1.00,0.00,0.00,0.42,0.10,0.00,255,21,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,18,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,18177,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,589,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,309,309,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,198,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,http,SF,245,167,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,40,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,1512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,86,255,1.00,0.00,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,93,0.09,0.05,0.09,0.02,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,236,2412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,13,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,1,0.04,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,0.91,0.00,0.00,0.04,0.00,0.84,1.00,anomaly 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,143,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,185,0.73,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,255,1.00,0.00,0.50,0.14,0.00,0.00,1.00,0.82,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,242,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,204,20,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,91,1.00,0.00,1.00,0.48,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,12,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 31,udp,domain_u,SF,134,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,96,0.99,0.02,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,8903,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,255,1.00,0.00,0.01,0.03,0.01,0.01,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,255,6,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,289,738,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,72,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 1,udp,domain_u,SF,111,31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,86,0.60,0.02,0.60,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,75,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,tcp,http,SF,167,4659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,1512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,172,1.00,0.00,0.01,0.02,0.00,0.01,0.02,0.05,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,15,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,1.00,0.02,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,944,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,222,166,0.65,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1776,495,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,28,0.11,0.02,0.00,0.00,0.00,0.00,0.75,0.00,normal 12683,tcp,IRC,RSTR,3484,7945,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,144,19,0.13,0.01,0.01,0.00,0.00,0.00,0.08,0.63,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,14,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,186,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,1362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,16,1.00,1.00,0.00,0.00,0.44,0.06,0.00,78,20,0.21,0.05,0.03,0.10,0.97,0.80,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,25,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,717,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,115,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,6,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1247,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,166,0.63,0.15,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,451,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,37,0.00,0.00,0.00,0.00,1.00,0.00,0.05,93,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,47,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,rje,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,227,10431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,6,255,1.00,0.00,0.17,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,163,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,60,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,4289,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,145,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,41,2,0.02,1.00,0.02,1.00,0.00,0.00,0.90,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,42,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,57,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,206,1849,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,19,1.00,0.00,1.00,0.53,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,1,0.00,0.00,0.00,0.00,0.04,0.35,0.00,255,1,0.00,0.18,0.53,0.00,0.00,0.00,0.40,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,3,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,13,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,1.00,1.00,0.00,0.00,1.00,0.00,0.00,64,136,0.34,0.03,0.02,0.01,0.97,0.16,0.00,0.00,anomaly 0,tcp,http,SF,191,2536,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,198,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,207,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,135,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,202,0.79,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,17,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,remote_job,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,229,255,1.00,0.00,0.01,0.03,0.00,0.00,0.37,0.43,normal 0,tcp,http,SF,322,2073,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 8477,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.25,0.00,0.75,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.27,0.00,0.73,1.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.16,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,67,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,7,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 8,tcp,smtp,SF,641,330,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,38,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,16,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,204,0.84,0.01,0.84,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,307,727,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,127,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,1,0.73,1.00,0.27,0.00,0.09,0.55,0.00,255,1,0.00,0.03,0.04,0.00,0.03,1.00,0.01,0.00,anomaly 0,tcp,http,SF,308,1899,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 279,tcp,telnet,SF,193,5725,0,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,64,0.25,0.02,0.00,0.00,0.80,0.94,0.00,0.00,normal 0,tcp,http,SF,213,308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,4848,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,11,1.00,1.00,0.00,0.00,0.22,0.08,0.00,255,63,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,51,0.00,0.00,0.00,0.00,0.65,0.05,0.00,255,113,0.44,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,7703,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,53,7,0.00,0.00,0.00,0.00,0.13,0.08,0.00,255,7,0.03,0.23,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,309,1362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,178,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,1572,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,52,3883,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,149,8,0.03,0.05,0.01,0.25,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,228,1112,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,22,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,15,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,52,0.30,0.03,0.30,0.04,0.00,0.00,0.00,0.00,normal 2140,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,21,1,0.05,0.76,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,0.29,0.29,0.17,75,72,0.96,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,3461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.62,107,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,2891,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,1842,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.29,60,72,1.00,0.00,0.02,0.07,0.02,0.03,0.00,0.00,normal 3,tcp,smtp,SF,2613,373,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,190,0.59,0.06,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,1.00,1.00,0.00,0.00,1.00,0.00,0.00,68,14,0.12,0.06,0.01,0.14,1.00,0.57,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.12,0.00,0.85,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.15,0.00,0.85,1.00,anomaly 0,tcp,http,SF,304,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,206,3,0.01,0.05,0.01,0.00,0.02,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,63,0.61,0.00,0.00,0.00,0.39,0.04,0.00,255,63,0.25,0.76,0.25,0.00,0.09,0.00,0.67,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,47,1.00,0.00,1.00,0.11,0.00,0.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,245,1761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,42,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,19,229,1.00,0.00,0.05,0.11,0.00,0.00,1.00,0.97,normal 0,udp,domain_u,SF,33,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.71,255,212,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,247,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,1752,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,52,0.00,0.00,0.00,0.00,1.00,0.00,0.08,73,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,17,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,17,0.07,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,343,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 9115,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,20,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,324,3410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,101,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,76,0.58,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,1,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,228,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,16,1.00,1.00,0.00,0.00,0.48,0.15,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,467,467,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,58,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,195,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,898,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,2,0.00,0.00,0.00,0.00,0.14,0.50,0.00,255,2,0.01,0.20,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,131,1.00,0.00,1.00,0.30,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,332,481,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,31,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,222,1.00,0.00,0.50,0.22,0.00,0.01,1.00,0.99,normal 0,tcp,http,SF,350,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,160,160,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.20,0.56,0.00,0.00,0.00,0.37,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,1,1.00,1.00,0.00,0.00,0.08,0.31,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,245,565,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,65,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,337,4874,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,7,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9,tcp,smtp,SF,11681,1371,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,169,0.57,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,15475,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,3346,374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,21,175,0.86,0.14,0.05,0.01,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,114,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,235,0.92,0.01,0.01,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,79,10,0.13,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,177,475,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,255,1.00,0.00,0.02,0.02,0.02,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,103,0.00,0.00,0.00,0.00,0.91,0.02,0.00,255,180,0.71,0.04,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,207,1969,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,14,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,304,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,81,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,767,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,86,131,0.65,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,208,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,10,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,24,1.00,1.00,0.00,0.00,0.44,0.07,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2940,385,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,85,0.33,0.05,0.00,0.00,0.31,0.00,0.02,0.00,normal 0,udp,domain_u,SF,45,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,430,10389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,19835,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1340,341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,160,0.62,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,194,1423,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,11,1.00,0.91,0.00,0.00,0.04,0.06,0.18,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,1792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 430,tcp,http,SF,221,256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,83,43,0.52,0.02,0.01,0.00,0.98,0.95,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,254,4084,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,57,2,0.02,1.00,0.02,1.00,0.00,0.00,0.96,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.09,0.00,0.00,1.00,0.97,normal 3977,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.43,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,334,1066,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,282,8544,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,4,78,1.00,0.00,0.25,0.10,0.25,0.01,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,80,1,0.01,0.41,0.40,0.00,0.08,0.00,0.38,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,212,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,62,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,205,882,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,252,1.00,0.00,0.33,0.25,0.00,0.00,1.00,0.87,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,11,0.85,0.15,0.15,0.00,0.00,0.00,0.00,0.00,normal 15,tcp,smtp,SF,1896,446,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,138,0.62,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,17,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,960,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,37,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,13,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,1054,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,203,0.82,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,90,0.98,0.04,0.98,0.22,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.02,0.03,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,50390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,15,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,46,0.18,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,233,13807,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,34,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,225,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,20,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 103,tcp,telnet,SF,179,24566,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,6,1.00,0.00,1.00,0.50,0.00,0.17,0.00,0.17,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,42,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,2,0.00,0.00,1.00,1.00,0.03,0.53,0.00,228,2,0.01,0.14,0.25,0.00,0.01,0.00,0.47,1.00,anomaly 0,tcp,http,SF,194,3563,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,9,1.00,1.00,0.00,0.00,0.04,0.05,0.00,78,9,0.12,0.10,0.01,0.00,0.97,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,37,28,0.76,0.08,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,1246,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S1,1151,8390,0,0,0,0,1,1,4,0,1,3,5,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,101,23,0.23,0.06,0.01,0.00,0.02,0.09,0.08,0.35,normal 31849,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,215,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,81,0.84,0.02,0.84,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,66,3,0.05,0.15,0.02,0.00,0.79,1.00,0.02,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,105,0.34,0.05,0.34,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,10,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,21,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,209,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,356,267,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,72,255,1.00,0.00,0.01,0.07,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,190,0.75,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,52,0.79,0.05,0.79,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2433,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,146,68,0.47,0.09,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,2168,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,9,1.00,1.00,0.00,0.00,0.53,0.12,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1339,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,50,0.09,0.03,0.09,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,675,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,97,152,0.67,0.18,0.02,0.01,0.03,0.01,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,9,1.00,1.00,0.00,0.00,0.26,0.11,0.00,255,24,0.09,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,4,87,1.00,0.00,0.25,0.30,0.00,0.00,1.00,1.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,8,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,0,61632,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,76,0.20,0.11,0.02,0.03,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,282,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,209,0.82,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,7,0.00,0.00,0.00,0.29,1.00,0.00,0.43,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,1,0.00,0.00,1.00,1.00,0.01,0.10,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,327,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1874,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,63,0.23,0.02,0.23,0.03,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,210,9076,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,255,1.00,0.00,0.01,0.05,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,300,14320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 31,tcp,ftp,SF,1486,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,14,0.15,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,5756,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,55,255,1.00,0.00,0.02,0.02,0.02,0.01,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,250,1,0.00,0.61,0.61,0.00,0.00,0.00,0.60,1.00,anomaly 0,tcp,http,SF,247,2955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,130,255,1.00,0.00,0.01,0.05,0.01,0.00,0.23,0.59,normal 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,25,0.10,0.75,0.10,0.00,0.73,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,23,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,342,2263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,367,367,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,319,38506,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,42,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,193,758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,68,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,233,0.91,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,13,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,174,1733,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,19,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,11,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,214,313,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,16,1.00,1.00,0.00,0.00,0.14,0.06,0.00,149,5,0.03,0.11,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,136,0.62,0.04,0.62,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,2124,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,31,0.00,0.00,0.00,0.00,1.00,0.00,0.06,88,252,1.00,0.00,0.01,0.06,0.01,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,31,0.18,0.02,0.18,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,16,1.00,1.00,0.00,0.00,0.28,0.07,0.00,255,66,0.26,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,7077,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,1,0.25,0.00,0.00,0.00,0.25,0.50,0.00,98,1,0.01,0.05,0.41,0.00,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,291,1098,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1085,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,78,105,0.72,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,194,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,273,3070,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,48,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,271,8654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1413,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,121,0.47,0.02,0.00,0.00,0.49,0.55,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,0.50,1.00,0.00,1.00,8,255,1.00,0.00,0.12,0.13,0.00,0.00,1.00,0.99,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,11,0.99,1.00,0.00,0.00,0.09,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,296,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.03,0.00,0.97,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,15,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,855,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,73,172,0.74,0.05,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,18,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,7,0.96,1.00,0.04,0.00,0.27,0.19,0.00,255,50,0.20,0.04,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,2996,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,4894,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,6,0.00,0.00,0.00,0.00,0.40,0.13,0.00,255,6,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,247,59,0.24,0.34,0.32,0.00,0.00,0.00,0.32,0.02,anomaly 3,tcp,telnet,SF,140,2810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,7,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,4,0.00,0.00,0.00,0.00,0.10,0.05,0.00,255,9,0.04,0.01,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,141,0.00,0.00,0.00,0.00,1.00,0.00,0.01,175,144,0.82,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,944,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,157,227,0.95,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,telnet,SF,24,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,2,0.02,0.08,0.02,1.00,0.00,0.50,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,13,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1387,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,229,121,0.50,0.07,0.00,0.02,0.02,0.02,0.00,0.00,normal 0,tcp,http,SF,317,17733,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,10,1.00,1.00,0.00,0.00,0.08,0.08,0.00,63,10,0.16,0.13,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,41,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,15,1.00,1.00,0.00,0.00,0.42,0.11,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 17833,tcp,telnet,SF,5167,65909,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,51,0.20,0.02,0.00,0.00,0.64,0.78,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,17,0.00,0.00,1.00,1.00,0.12,0.06,0.00,72,17,0.24,0.08,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,242,561,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,5,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,179,1.00,0.00,0.50,0.07,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,8,1.00,1.00,0.00,0.00,0.18,0.13,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,500,8257,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,344,1247,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,17,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,2,0.00,0.00,0.00,0.00,0.07,0.29,0.00,255,2,0.01,0.82,0.22,0.00,0.10,0.00,0.69,0.00,anomaly 0,tcp,http,SF,227,1047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,118,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,2251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.02,0.00,0.00,0.08,0.09,normal 69,tcp,http,SF,237,238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,73,255,1.00,0.00,0.01,0.07,0.00,0.00,0.03,0.02,normal 0,udp,domain_u,SF,45,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,811,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 22,tcp,ftp,SF,326,1054,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,3,0.03,0.97,0.01,0.67,0.00,0.00,0.89,0.67,normal 0,tcp,http,SF,224,1540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 17,tcp,smtp,SF,9654,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,156,213,0.81,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,4539,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,82,0.29,0.02,0.29,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,10,0.08,0.06,0.02,0.20,0.00,0.00,0.00,0.00,normal 20,tcp,smtp,SF,2261,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,164,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,223,0.87,0.08,0.87,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,5,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,7,443,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,10,0.04,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,S1,125,235,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,145,171,0.76,0.03,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,136,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,1,0.00,0.00,0.88,1.00,0.12,1.00,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,0.04,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,31,0.30,0.04,0.30,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3924,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.81,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.99,0.98,0.00,0.00,0.00,0.98,1.00,anomaly 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,51,2,0.02,1.00,0.02,1.00,0.00,0.00,0.96,0.50,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,153,119,0.50,0.04,0.01,0.02,0.01,0.01,0.01,0.00,normal 0,tcp,smtp,SF,129,237,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,12,0.11,0.63,0.01,0.00,0.00,0.00,0.59,0.00,normal 0,tcp,http,SF,212,2739,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,187,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,17,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,137,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,21,1.00,0.00,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,168,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,4,1.00,1.00,0.00,0.00,0.31,0.46,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,196,17602,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,7128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,255,1.00,0.00,0.01,0.04,0.00,0.00,0.01,0.00,normal 0,tcp,supdup,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,0.00,0.00,1.00,1.00,0.13,0.05,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,1,0.10,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.89,1.00,anomaly 0,udp,domain_u,SF,42,92,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,194,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,79,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,231,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1535,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,212,188,0.72,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,755,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,101,0.72,0.04,0.01,0.00,0.01,0.02,0.00,0.00,normal 0,tcp,http,SF,214,12326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,117,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,3,0.00,0.00,0.00,0.00,0.14,0.14,0.00,255,3,0.01,0.92,0.09,0.00,0.03,0.00,0.88,0.00,anomaly 0,tcp,http,SF,214,1718,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,9384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,262,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,179,0.70,0.01,0.70,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,SF,10,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,11,0.04,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2066,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,94,0.37,0.05,0.00,0.00,0.24,0.00,0.02,0.00,normal 0,tcp,ftp_data,SF,151,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,34,0.26,0.05,0.26,0.00,0.02,0.00,0.05,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,3,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,42,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,139,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,65,66,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,62,0.12,0.07,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,19,0.95,1.00,0.05,0.00,0.95,0.10,0.00,255,57,0.22,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ssh,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,9,0.00,0.00,1.00,1.00,0.03,0.05,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 8035,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.67,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1247,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,82,60,0.73,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,18,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,SF,9,38,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,7,0.03,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,1963,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,26,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,48,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,16,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,telnet,SF,102,3741,0,0,0,0,0,1,0,1,0,2,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,1,0.07,0.21,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,46,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,21,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,446,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,70,2,0.01,1.00,0.01,1.00,0.00,0.00,0.90,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,15,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,5,1.00,0.00,0.20,0.00,0.00,0.00,0.00,0.00,anomaly 5,tcp,smtp,SF,2481,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,21,0.33,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,257,545,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,43,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,2,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.13,0.00,0.85,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.82,1.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,20,0.00,0.00,1.00,1.00,0.09,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,287,2459,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,36,11,1.00,1.00,0.00,0.00,0.31,0.11,0.00,255,59,0.23,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,58,0.24,0.01,0.24,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,1,0.00,0.00,0.00,0.00,0.05,0.14,0.00,255,1,0.00,0.90,0.11,0.00,0.13,0.00,0.76,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,281,744,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,153,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,84,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,51,0.20,0.01,0.20,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,5,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,132,1,0.01,0.92,0.94,0.00,0.94,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,1342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,182,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,0.50,1.00,0.00,1.00,1,255,1.00,0.00,1.00,0.25,0.00,0.00,1.00,0.95,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,2775,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,100,255,1.00,0.00,0.01,0.02,0.00,0.00,0.03,0.01,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,27728,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,298,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,26,0.00,0.00,0.00,0.00,1.00,0.00,0.23,12,255,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1339,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,14,0.13,0.04,0.13,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,25,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,161,30205,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,295,741,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,39,0.00,0.00,0.00,0.00,1.00,0.00,0.05,174,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,145,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,225,4257,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,5,255,1.00,0.00,0.20,0.05,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,119,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,201,5606,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,279,3018,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,154,13386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.03,0.00,0.00,0.01,0.01,normal 0,udp,domain_u,SF,44,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,247,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,781,334,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,28,0.81,0.12,0.04,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,1271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1529,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,26,0.20,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,17,0.97,1.00,0.03,0.00,0.28,0.10,0.00,255,37,0.15,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,23,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,5,0.00,0.00,0.00,0.00,0.83,0.33,0.00,255,10,0.04,0.01,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,25,1,0.04,1.00,0.04,0.00,0.00,0.00,0.96,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,0.97,0.00,0.00,0.04,0.00,0.92,1.00,anomaly 0,tcp,http,SF,255,2972,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,162,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,36,1.00,0.00,1.00,0.11,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,RSTO,126,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,28,28,1.00,0.00,0.04,0.00,0.07,0.07,0.93,0.93,anomaly 0,tcp,telnet,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,3,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,301,9121,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,180,255639,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,20,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,186,1310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,12,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,107,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,10,1.00,1.00,0.00,0.00,0.43,0.17,0.00,255,62,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,289,2536,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,201,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,126,73,0.17,0.04,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,10,1.00,1.00,0.00,0.00,0.18,0.11,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,26,2,0.04,1.00,0.04,1.00,0.00,0.00,0.96,1.00,anomaly 0,udp,other,SF,113,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,27,0.00,0.00,0.00,0.00,0.96,0.07,0.00,255,27,0.11,0.53,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,509,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,216,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,211,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,335,951,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.07,0.00,0.00,0.11,0.05,normal 0,udp,domain_u,SF,46,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,152,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 13,udp,domain_u,SF,24,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,242,0.95,0.02,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,207,318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,6,0.33,0.17,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,udp,private,SF,105,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,232,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,633,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,161,255,1.00,0.00,0.01,0.04,0.01,0.01,0.00,0.02,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,http,SF,339,279,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,152,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,18,0.00,0.00,1.00,1.00,0.21,0.06,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,70,0.36,0.03,0.36,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,951,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,72,48,0.67,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,66,0.00,0.00,0.00,0.00,0.64,0.06,0.00,255,126,0.49,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,244,2316,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,39,238,1.00,0.00,0.03,0.24,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,223,3270,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,33,1.00,0.00,0.50,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,180,10,0.06,0.03,0.01,0.00,0.02,0.00,0.08,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,22,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,RSTO,126,179,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,45,45,1.00,0.00,0.02,0.00,0.04,0.04,0.96,0.96,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.91,0.91,0.00,0.00,0.00,0.90,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.20,0.18,0.00,0.00,0.00,0.18,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,14,1.00,1.00,0.00,0.00,0.41,0.12,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,234,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,4,0.00,0.00,0.00,0.00,0.36,0.18,0.00,255,30,0.12,0.01,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,4633,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,4,0.02,0.01,0.13,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,5,1.00,1.00,0.00,0.00,0.71,0.29,0.00,207,46,0.22,0.02,0.00,0.04,1.00,0.98,0.00,0.00,anomaly 0,tcp,http,SF,209,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,89,255,1.00,0.00,0.01,0.02,0.00,0.00,0.03,0.04,normal 60,tcp,telnet,SF,87,225,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,3410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.31,0.31,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,25,1.00,1.00,0.00,0.00,0.21,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,198,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,0.00,0.00,1.00,1.00,0.07,0.05,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,205,13831,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,18,0.00,0.00,1.00,1.00,0.12,0.05,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,10,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,10,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,252,1352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,1918,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.89,0.88,0.00,0.00,0.00,0.88,1.00,anomaly 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,298,8673,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,111,255,1.00,0.00,0.01,0.04,0.01,0.00,0.00,0.00,normal 0,tcp,smtp,SF,601,286,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,64,0.25,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,44,0.52,0.06,0.52,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,8056,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,255,1.00,0.00,0.01,0.04,0.01,0.01,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,104,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,108,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,4,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,304,1412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,17,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,9,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,26,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,1817,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,3468,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,1,0.04,0.00,0.00,0.00,0.04,0.42,0.00,206,1,0.00,0.12,0.41,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,343,520,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,755,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,103,156,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,15,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,5415,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,22,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,477,477,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,92,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,231,1187,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,4,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,112,0.00,0.00,0.00,0.00,0.97,0.06,0.02,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,11607,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.05,0.00,0.00,0.00,0.01,normal 2,tcp,smtp,SF,11378,1474,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.50,0.00,0.00,1.00,0.00,1.00,117,192,0.73,0.03,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,305,181,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.17,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,12,1.00,1.00,0.00,0.00,0.05,0.05,0.00,204,12,0.06,0.06,0.00,0.00,0.93,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,284,657,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,220,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,1645,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,7333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,35,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,239,0.94,0.02,0.94,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,280,3727,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,6,1.00,1.00,0.00,0.00,0.07,0.08,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S1,343,21900,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.50,0.01,0.00,0.00,normal 0,tcp,smtp,SF,2491,489,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,123,0.48,0.01,0.00,0.00,0.64,0.67,0.00,0.00,normal 1,tcp,smtp,SF,919,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,136,114,0.30,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,13,210,1.00,0.00,0.08,0.14,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,220,2281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,19,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,9,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,3983,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,215,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,16,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,2661,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,2,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,305,2271,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,185,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,292,3740,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.20,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.03,0.03,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.02,0.01,0.00,0.00,0.00,0.84,0.00,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,19,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,19,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,31,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,183,0.76,0.08,0.76,0.01,0.00,0.00,0.24,0.00,normal 0,tcp,ftp_data,SF,26,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,65,0.25,0.02,0.02,0.00,0.86,0.92,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,38,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,62,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,18,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.80,0.80,1.00,0.00,0.00,15,190,1.00,0.00,0.07,0.21,0.00,0.00,0.93,0.94,normal 0,tcp,http,SF,231,5280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,349,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 6522,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.44,0.72,0.00,0.00,0.00,0.00,0.00,normal 15624,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.86,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,14236,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,125,0.49,0.02,0.49,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,19,0.00,0.00,1.00,1.00,0.06,0.05,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,306,8521,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,162,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1029,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,129,121,0.33,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,3162,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,73,0.47,0.05,0.47,0.03,0.04,0.00,0.01,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.87,1.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,229,0.90,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 18,tcp,smtp,SF,1036,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,116,199,0.80,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,12,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,19,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,171,149,0.87,0.03,0.01,0.00,0.00,0.00,0.87,1.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,250,273,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.33,1.00,0.00,0.67,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,16,1.00,1.00,0.00,0.00,0.07,0.04,0.00,90,16,0.18,0.09,0.01,0.00,0.98,1.00,0.00,0.00,anomaly 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,9,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,8,1.00,1.00,0.00,0.00,0.04,0.08,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12324,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,58,0.11,0.07,0.11,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,34,9,0.26,0.12,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,19,1.00,0.00,1.00,0.21,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,193,2969,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,6,239,1.00,0.00,0.17,0.13,0.00,0.00,1.00,0.98,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,256,466,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,20,1.00,1.00,0.00,0.00,0.09,0.08,0.00,255,20,0.08,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,593,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,45024,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,166,27660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,251,251,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,3,1.00,1.00,0.00,0.00,0.27,0.36,0.00,255,59,0.23,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,130,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,81,119,0.52,0.10,0.02,0.03,0.01,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,6,1.00,0.00,1.00,0.67,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,15,42,1.00,0.00,0.07,0.26,0.00,0.00,1.00,1.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.10,0.00,0.00,1.00,1.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,19,0.98,1.00,0.03,0.00,0.47,0.08,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,189,4766,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,184,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 18418,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,845,384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,77,0.24,0.51,0.01,0.03,0.01,0.00,0.49,0.03,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,1047,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,229,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.54,normal 0,tcp,http,SF,210,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,85,255,1.00,0.00,0.01,0.02,0.00,0.00,0.04,0.04,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,15,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,16,0.00,0.00,1.00,1.00,0.13,0.07,0.00,148,16,0.11,0.07,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,222,613,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,6,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,5,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,246,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,183,255,1.00,0.00,0.01,0.01,0.01,0.00,0.04,0.03,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,12,1.00,1.00,0.00,0.00,0.19,0.06,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,7,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,15,1.00,1.00,0.00,0.00,0.33,0.13,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,4018,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,96,0.38,0.24,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,155,7,0.05,0.04,0.01,0.00,0.01,0.00,0.07,1.00,normal 0,tcp,http,SF,227,484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,8,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,8,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 12,tcp,ftp_data,SF,7045,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,13,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,239,775,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1125,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,36,0.00,0.00,0.00,0.00,1.00,0.00,0.06,96,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,296,449,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,44,0.00,0.00,0.00,0.00,1.00,0.00,0.05,53,56,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,43,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,190,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,0.00,0.00,1.00,1.00,0.03,0.08,0.00,128,3,0.02,0.08,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,18,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,96,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,240,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,71,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,323,601,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,61,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,915,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,38,39,0.00,0.00,0.00,0.00,1.00,0.00,0.05,85,255,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,icmp,ecr_i,SF,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,1,0.05,0.16,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,19,1.00,1.00,0.00,0.00,0.33,0.05,0.00,255,71,0.28,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,19,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,1,229,1.00,0.00,1.00,0.18,0.00,0.00,1.00,0.76,normal 0,tcp,ssh,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,16,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,209,2649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,51,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,108,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 15,tcp,smtp,SF,16711,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,113,0.90,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,49,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,234,0.92,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,271,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,20,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,6,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,10,0.07,0.03,0.02,0.20,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,385,361,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,231,1.00,0.00,0.01,0.19,0.00,0.00,0.08,0.70,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,19,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,246,772,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,251,44,0.18,0.03,0.00,0.00,0.01,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,45,1.00,0.00,1.00,0.27,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,312,575,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,1498,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,76,10,0.13,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,156,1,0.01,0.94,0.95,0.00,0.95,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,108,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,72,152,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,25,255,1.00,0.00,0.04,0.11,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,39,0.72,0.00,0.00,0.00,0.28,0.05,0.00,255,39,0.15,0.85,0.15,0.00,0.09,0.00,0.76,0.00,anomaly 0,tcp,http,SF,163,1510,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,3,255,1.00,0.00,0.33,0.01,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,802,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,60,185,0.95,0.03,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,4,1.00,1.00,0.00,0.00,0.21,0.26,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,76,0.29,0.03,0.29,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,94,5,0.05,0.09,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,4,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,33,5,0.00,0.00,0.00,0.00,0.15,0.12,0.00,255,55,0.22,0.25,0.95,0.00,0.00,0.00,0.05,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,1875,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,15,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,63,0.41,0.14,0.41,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,172,3748,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,122,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,341,1229,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,11,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,11,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,10,0.00,0.00,1.00,1.00,0.09,0.07,0.00,88,10,0.11,0.09,0.01,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,4189,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,31,0.20,0.08,0.20,0.06,0.00,0.00,0.00,0.00,normal 3,udp,domain_u,SF,111,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,56,40,0.71,0.05,0.64,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,10,1.00,1.00,0.00,0.00,0.29,0.11,0.00,197,52,0.25,0.02,0.02,0.04,0.99,0.96,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,1352,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,9,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,335,580,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,23,0.00,0.00,0.00,0.00,1.00,0.00,0.26,82,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,20,1.00,1.00,0.00,0.00,0.29,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,574,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.02,0.00,0.01,0.00,0.02,normal 0,udp,domain_u,SF,127,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,267,0.00,0.00,0.00,0.00,1.00,0.01,0.00,157,124,0.79,0.01,0.32,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,438,438,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,5,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,11,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,65,2,0.02,1.00,0.02,1.00,0.00,0.00,0.92,1.00,anomaly 0,tcp,http,SF,222,724,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,52,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,228,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,21,255,1.00,0.00,0.05,0.10,0.00,0.00,1.00,0.80,normal 0,tcp,ftp_data,SF,5319,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,56,0.23,0.03,0.23,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,0,180,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,4,255,1.00,0.00,0.25,0.02,0.25,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,12,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,44,0.08,0.05,0.08,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,63,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,319,1338,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,282,1828,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,9,255,1.00,0.00,0.11,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,270,10699,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,8,192,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,396,4037,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2146,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,210,212,0.85,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,30,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.44,0.00,0.56,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.52,0.00,0.48,1.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,18,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,374,6410,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,18,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,16,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,47,0.93,0.13,1.00,0.11,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,334,2488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,185,221,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,19,0.00,0.00,1.00,1.00,0.15,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,342,453,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,23,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,5,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,244,9737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,98,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12165,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,49,0.19,0.02,0.19,0.00,0.52,0.00,0.00,0.00,normal 0,tcp,http,SF,273,5320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,7,1.00,1.00,0.00,0.00,0.27,0.15,0.00,255,27,0.11,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.17,0.04,0.00,0.96,1.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,235,128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,116,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,24,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,271,732,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,111,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.10,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.14,0.00,0.86,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,10,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 891,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,2,0.01,0.64,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,848,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,143,73,0.51,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,14,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,382,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,75,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,anomaly 0,tcp,smtp,SF,2931,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,128,0.50,0.05,0.00,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.80,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,289,901,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,39,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,274,2592,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,217,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,303,2991,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,9,0.50,0.11,0.00,0.00,1.00,0.00,0.22,20,255,1.00,0.00,0.10,0.01,0.10,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,80,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,227,717,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,23,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,322,10220,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,229,7149,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,71,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,117,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,4,0.00,0.00,0.00,0.00,0.22,0.28,0.00,255,42,0.16,0.47,0.69,0.00,0.00,0.00,0.31,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 14680,tcp,telnet,SF,4866,72771,0,0,0,0,0,1,4,0,0,0,20,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,33,0.13,0.34,0.00,0.00,0.34,0.12,0.00,0.03,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,100,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,161,6684,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,117,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,140,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,3,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,272,822,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,1492,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1500,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,206,49,0.24,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,8,1.00,1.00,0.00,0.00,0.16,0.10,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,4,1.00,1.00,0.00,0.00,0.36,0.36,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,1.00,1.00,0.00,0.00,0.67,0.67,0.00,83,23,0.27,0.05,0.02,0.09,1.00,0.96,0.00,0.00,anomaly 0,tcp,http,SF,335,2370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1478,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,48,0.19,0.07,0.00,0.00,0.64,0.00,0.01,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,20,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,144,1.00,0.00,0.33,0.22,0.00,0.00,1.00,1.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,21,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,81,0.71,0.43,0.71,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,SF,14,37,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,168,8,0.05,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,195,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.88,0.88,0.00,0.00,0.00,0.87,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,4,1.00,1.00,0.00,0.00,0.33,0.25,0.00,255,64,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,7208,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,181,181,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,320,2367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,1408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,18,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,7334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,314,313,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,92,5,0.05,0.03,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,207,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,78,0.83,0.02,0.83,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,253,1721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,32,0.00,0.00,0.00,0.00,1.00,0.00,0.09,168,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,40,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,222,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.11,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,30,0.12,0.05,0.12,0.00,0.30,0.00,0.02,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,7,1.00,1.00,0.00,0.00,0.44,0.19,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,164,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,145,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,189,9345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,160,10210,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,IRC,S1,37681,40396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,88,16,0.18,0.02,0.01,0.00,0.16,0.88,0.00,0.00,normal 0,tcp,smtp,SF,1162,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,109,0.95,0.10,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,343,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,55,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,auth,SF,10,36,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,98,10,0.06,0.04,0.01,0.20,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,64,0.27,0.07,0.32,0.00,0.00,0.02,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,75,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,131,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.27,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,159,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,25,0.10,0.01,0.10,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,325,856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,482,482,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,109,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,176,925,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,45,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1342,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,79,0.28,0.04,0.28,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,248,12635,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,228,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,18,1.00,1.00,0.00,0.00,0.20,0.07,0.00,197,18,0.09,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,198,1,0.01,0.76,0.76,0.00,0.03,0.00,0.63,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,53,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,263,5264,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,18,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,5,1.00,1.00,0.00,0.00,0.07,0.08,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,157,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,244,402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,67,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,574,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,14,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,932,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,171,0.75,0.25,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,99,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,259,459,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,23,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,3,22,1.00,0.00,0.33,0.09,0.00,0.09,1.00,0.18,normal 0,tcp,http,SF,374,1861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,231,1.00,0.00,0.02,0.20,0.00,0.00,0.09,0.75,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,17,1.00,1.00,0.00,0.00,0.14,0.07,0.00,199,17,0.09,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,277,13083,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.14,0.00,0.86,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.12,0.00,0.88,1.00,anomaly 0,tcp,finger,SF,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,10,0.09,0.09,0.03,0.30,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,67,147,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,15,0.99,1.00,0.00,0.00,0.13,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,348,14642,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,190,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,rje,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,418,1,0.06,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.91,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,445,1,0.05,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,tcp,http,SF,293,2530,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,145,255,1.00,0.00,0.01,0.06,0.00,0.00,1.00,0.97,normal 0,tcp,http,SF,261,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,44,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,164,4105,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,56,56,1.00,0.00,0.02,0.00,0.02,0.02,0.00,0.00,normal 0,tcp,ftp_data,SF,16115,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,18,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,161,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.39,0.36,0.00,0.00,0.00,0.37,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 222,tcp,telnet,SF,101,4427,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,1,0.03,0.06,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,2472,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,24,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,601,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,101,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,24,1.00,1.00,0.00,0.00,0.21,0.04,0.00,255,24,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 20,udp,domain_u,SF,111,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,237,0.93,0.01,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,80,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,1320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,22,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,24,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,19,255,1.00,0.00,0.05,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,5121,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,38,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,12,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 22821,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,12,6,0.50,0.33,0.08,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,13,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,67,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,172,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 12,tcp,ftp_data,SF,7045,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,255,83,0.33,0.07,0.35,0.00,0.02,0.05,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,16,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1101,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,200,149,0.57,0.04,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,174,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.05,0.00,0.00,0.00,0.01,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,13,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,1092,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 36965,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,329,2189,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,255,1.00,0.00,0.01,0.02,0.00,0.02,0.01,0.01,normal 0,tcp,http,SF,280,5592,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,9,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,181,14276,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,85,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,197,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,29,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,114,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,226,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,417,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,17,1.00,0.00,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,171,0.91,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,1,0.01,0.00,0.94,1.00,0.01,1.00,0.00,239,1,0.00,0.51,0.00,0.00,0.00,0.00,0.46,1.00,anomaly 0,tcp,smtp,SF,1143,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,162,119,0.60,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,1,0.06,0.00,0.88,1.00,0.00,1.00,0.00,255,1,0.00,0.86,0.00,0.00,0.05,0.00,0.75,1.00,anomaly 0,tcp,http,SF,233,2239,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,437,437,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,10,1.00,1.00,0.00,0.00,0.04,0.04,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,328,1912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,ftp,SF,1250,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,135,0.53,0.02,0.01,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,146,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,139,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,273,4834,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,9,1.00,0.00,0.17,0.22,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,58,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,191,1392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,1,255,1.00,0.00,1.00,0.05,0.00,0.00,0.00,0.01,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,28,0.11,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,12,0.00,0.00,1.00,1.00,0.11,0.06,0.00,255,12,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,308,1924,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,180,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.03,normal 0,tcp,ftp_data,SF,203,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,72,0.22,0.10,0.24,0.03,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,228,4781,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,25,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,166,24084,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,263,3253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.50,0.40,0.00,0.00,1.00,0.00,0.40,231,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,5024,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,9,255,1.00,0.00,0.11,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,330,350,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,221,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,24,1.00,0.00,0.04,0.00,0.12,0.12,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,218,5,0.02,0.75,0.02,0.00,0.03,0.00,0.61,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,35,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,368,2751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,9,0.00,0.00,0.00,0.00,1.00,0.00,0.44,23,231,1.00,0.00,0.04,0.22,0.00,0.00,0.13,0.81,normal 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,46,0.80,0.40,0.80,0.04,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,2277,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,186,0.72,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,20,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,147,3253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,302,2039,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,51,51,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,51,0.20,0.02,0.20,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,651,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,36,0.14,0.02,0.00,0.00,0.00,0.00,0.81,0.00,normal 0,tcp,smtp,SF,4071,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,244,0.97,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,13294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,4,0.00,0.00,1.00,1.00,0.04,0.08,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,12,1.00,1.00,0.00,0.00,0.24,0.08,0.00,255,55,0.22,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,187,1330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,76,255,1.00,0.00,0.01,0.07,0.00,0.01,0.01,0.01,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,123,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1701,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,122,0.48,0.02,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,0.17,0.33,0.29,106,103,0.97,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.02,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,74,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,206,771,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,21,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,220,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,245,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,60814,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,36,0.14,0.75,0.00,0.00,0.74,0.00,0.00,0.00,normal 0,tcp,http,SF,216,16904,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,11,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,79,18,0.23,0.13,0.01,0.00,0.82,1.00,0.01,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,24,1.00,1.00,0.00,0.00,0.16,0.04,0.00,255,24,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,344,3123,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,28,1.00,0.00,0.04,0.00,0.00,0.00,0.07,0.07,anomaly 0,tcp,http,SF,257,2616,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.69,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,197,7712,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,10613,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,255,1.00,0.00,0.05,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,50,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,295,955,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,282,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 4189,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,159,0.00,0.00,0.00,0.00,1.00,0.00,0.03,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 132,tcp,ftp,SF,225,756,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,163,44,0.27,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,82,16,0.00,0.00,1.00,1.00,0.20,0.07,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,193,16,0.08,0.06,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,3,1.00,1.00,0.00,0.00,0.25,0.25,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,191,24802,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,164,19950,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 10249,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.21,0.38,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,2,0.00,0.00,1.00,1.00,0.07,0.52,0.00,197,2,0.01,0.09,0.14,0.00,0.01,0.00,0.39,1.00,anomaly 32,tcp,ftp,SF,1487,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,11,0.65,0.18,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,1,0.22,0.00,0.77,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.84,1.00,anomaly 0,tcp,http,SF,245,299,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,12,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,5888,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,21,0.00,0.00,0.00,0.00,1.00,0.00,0.19,255,177,0.69,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,265,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,342,1555,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,22,0.05,0.05,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,22,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,36,0.14,0.06,0.14,0.00,0.75,0.00,0.00,0.00,normal 0,tcp,http,SF,280,24293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,217,1786,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,332,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,138,255,1.00,0.00,0.01,0.04,0.00,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,37,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,120,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,120,0.47,0.02,0.47,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,510,510,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,219,0.86,0.02,0.86,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,323,1119,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,67,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,307,307,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,218,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,7255,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,135,1,0.01,0.28,0.27,0.00,0.00,0.00,0.27,1.00,anomaly 0,tcp,http,SF,323,608,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,121,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,234,1,0.00,0.30,0.28,0.00,0.00,0.00,0.29,1.00,anomaly 0,tcp,http,SF,317,2006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,280,263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,960,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,119,0.47,0.03,0.47,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,221,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,299,25796,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,844,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,74,126,0.41,0.08,0.01,0.02,0.01,0.02,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,5,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,1,0.00,0.00,1.00,1.00,0.06,0.61,0.00,255,1,0.00,0.05,0.07,0.00,0.00,0.00,0.85,1.00,anomaly 0,tcp,http,SF,220,3238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,46,1.00,0.00,0.10,0.13,0.00,0.02,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,45,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,127,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,4380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,1051,3081,0,0,0,22,0,1,0,0,0,0,0,0,0,0,0,1,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,114,2,0.02,0.04,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,3495,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.12,0.12,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.02,0.02,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,153,19,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,6,269,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,216,2,0.01,0.02,0.00,0.00,0.00,0.00,0.87,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,1,0.00,0.00,1.00,1.00,0.01,0.08,0.00,29,1,0.03,0.17,0.03,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,364,3798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,254,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,8766,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,87,0.91,0.18,0.91,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,11,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,57,207,0.00,0.00,0.00,0.00,1.00,0.00,0.02,197,196,0.80,0.02,0.71,0.01,0.00,0.00,0.07,0.00,normal 0,tcp,http,SF,352,8260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,16,0.00,0.00,0.00,0.00,1.00,0.00,0.19,70,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.05,0.00,0.00,1.00,0.75,normal 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,159,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,211,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,17,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,346,1798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,184,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,3,0.01,0.01,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,68,68,1.00,0.00,0.01,0.00,0.00,0.00,1.00,1.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,203,2557,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,30,0.00,0.00,0.00,0.00,1.00,0.00,0.13,85,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,69,1,0.01,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,10,10,1.00,0.00,0.20,0.00,0.10,0.10,0.00,0.00,normal 5042,tcp,ftp_data,SF,5133876,0,0,0,0,7,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,34,1.00,0.00,1.00,0.15,0.00,0.03,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,140,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,289,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,15,1.00,1.00,0.00,0.00,0.47,0.06,0.00,232,55,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3468,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,200,77,0.38,0.03,0.38,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,2591,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.06,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,281,3232,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 14,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,83,0.93,0.03,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,247,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,24,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,273,6801,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,162,13187,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,79,79,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,266,1963,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.60,0.60,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,http,SF,323,310,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.02,0.00,0.01,0.24,0.05,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,268,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,225,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,17,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,19,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,94,8,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,14,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,114,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,239,218,0.91,0.01,0.00,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,http,SF,195,10849,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,5,255,1.00,0.00,0.20,0.06,0.00,0.00,0.00,0.00,normal 1,tcp,finger,SF,7,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,67,4,0.06,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,65,0.25,0.01,0.32,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,397,397,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,34,0.13,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,159,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,318,10976,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,15,0.00,0.00,0.00,0.00,1.00,0.00,0.33,18,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 15122,tcp,telnet,SF,1154,176690,0,0,0,0,0,1,884,1,2,975,0,0,5,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,4,0.20,0.13,0.07,0.50,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,24,0.09,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,19,0.99,1.00,0.00,0.00,0.13,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,238,1856,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,248,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,22,0.09,0.02,0.09,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,1206,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,26,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,45,0.00,0.00,0.02,0.00,0.98,0.04,0.00,255,45,0.18,0.02,0.18,0.00,0.00,0.00,0.62,0.00,anomaly 0,tcp,smtp,SF,1515,335,0,0,0,0,0,1,0,0,0,0,0,0,2,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,131,164,0.60,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,748,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,192,0.85,0.04,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,7,1.00,1.00,0.00,0.00,0.14,0.12,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,69,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,114,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,16,255,1.00,0.00,0.06,0.15,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,13,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,688,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,25,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,246,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,46,1.00,0.00,1.00,0.04,0.00,0.02,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.07,0.00,0.00,0.91,0.94,normal 0,tcp,http,SF,310,2251,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,45,67,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,17,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,17,0.07,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,13,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,133,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,220,1753,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.03,0.03,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,195,1042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 40,tcp,telnet,SF,127,10471,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,3,0.01,0.11,0.01,0.67,0.01,0.00,0.00,0.00,normal 10349,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.62,0.96,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,169,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,231,28,0.12,0.03,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,16,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2074,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,132,165,0.54,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,190,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,293,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,7,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,32,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,853,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 15,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,9,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,9,1.00,1.00,0.00,0.00,0.45,0.20,0.00,102,29,0.28,0.04,0.02,0.00,0.98,1.00,0.00,0.00,anomaly 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,27,0.11,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,327,2662,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,244,255,1.00,0.00,0.00,0.01,0.00,0.00,0.01,0.01,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,37,0.00,0.00,0.00,0.00,1.00,0.00,0.00,250,37,0.15,0.65,0.15,0.00,0.02,0.00,0.53,0.00,anomaly 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,15,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,15,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,50,1.00,0.00,0.02,0.00,0.00,0.00,0.04,0.04,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,95,1,0.01,0.00,0.91,1.00,0.01,1.00,0.00,255,1,0.00,0.39,0.00,0.00,0.00,0.00,0.35,1.00,anomaly 5057,tcp,ftp_data,SF,5133876,0,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,16,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,187,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,205,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,109,0.75,0.50,0.75,0.03,0.25,0.00,0.00,0.00,normal 0,tcp,http,SF,289,2658,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,37,40,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,24,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,5319,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,81,0.32,0.02,0.32,0.00,0.00,0.00,0.03,0.00,normal 0,tcp,pop_2,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,20,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,20,0.08,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,18,1.00,0.00,0.06,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,7,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,7,1.00,1.00,0.00,0.00,0.02,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,286,20424,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,2,0.66,0.50,0.34,0.50,0.01,0.40,0.00,255,2,0.01,0.29,0.72,0.00,0.48,0.50,0.24,0.50,anomaly 0,tcp,http,SF,235,1694,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.14,0.00,0.00,1.00,0.00,0.43,182,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,296,422,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,1408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,30328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,419,419,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 2641,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.85,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,2020,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.08,0.07,0.00,0.00,1.00,0.00,0.14,61,255,1.00,0.00,0.02,0.02,0.02,0.01,0.00,0.00,normal 0,tcp,smtp,SF,1567,476,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,124,107,0.02,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,211,3115,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,30,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,121,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,972,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,233,23,0.10,0.58,0.00,0.00,0.00,0.04,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,176,17,0.99,1.00,0.00,0.00,0.10,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,9986,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,24,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,19,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.18,0.00,0.82,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.10,0.00,0.90,1.00,anomaly 0,udp,domain_u,SF,44,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,205,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,91,0.70,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 1730,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.83,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,24,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,321,2335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,23,0.00,0.00,0.00,0.00,1.00,0.00,0.09,43,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 31,tcp,ftp,SF,283,907,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,239,59,0.25,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 36,tcp,smtp,SF,601,341,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,116,166,0.53,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,8,0.03,0.20,0.59,0.00,0.00,0.00,0.35,0.00,anomaly 0,udp,domain_u,SF,34,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,7,7,0.14,0.14,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.04,0.04,anomaly 0,tcp,http,SF,321,1306,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,253,1.00,0.00,0.20,0.09,0.00,0.00,1.00,0.42,normal 0,tcp,http,SF,288,4872,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,12,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2276,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,212,0.76,0.10,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,784,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,204,2056,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,170,255,1.00,0.00,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,286,13635,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,193,758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,26,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,329,782,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,253,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,15,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,271,3315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,2263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,11,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,155,4187,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,184,1.00,0.00,0.01,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,http,SF,218,667,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1553,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,34,26,0.76,0.09,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,9,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,336,2710,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 27,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,0.20,0.40,0.33,25,24,0.96,0.08,0.04,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1708,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,5,150,0.80,0.40,0.20,0.01,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,8,0.03,0.15,0.42,0.00,0.00,0.00,0.50,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.02,0.02,anomaly 0,tcp,http,SF,197,10216,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,10861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,220,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,198,0.78,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,233,2213,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,14,1.00,1.00,0.00,0.00,0.25,0.07,0.00,255,56,0.22,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,48,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,46,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,17,1.00,1.00,0.00,0.00,0.23,0.05,0.00,255,58,0.23,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,37,9,1.00,1.00,0.00,0.00,0.24,0.11,0.00,255,55,0.22,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,3475,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,45,0.23,0.03,0.23,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1112,307,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,225,100,0.36,0.01,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,308,2507,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,74,67,0.91,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,7,1,0.14,1.00,0.14,0.00,0.00,0.00,0.86,1.00,anomaly 0,tcp,smtp,SF,3873,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,156,0.83,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,173,1,0.01,0.16,0.31,0.00,0.00,0.00,0.31,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,17,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,142,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.44,0.42,0.00,0.00,0.00,0.43,1.00,anomaly 0,tcp,http,SF,206,3644,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,278,2380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1408,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,19,165,0.89,0.11,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,297,9287,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,255,1.00,0.00,0.01,0.01,0.00,0.00,0.10,0.07,normal 1,tcp,smtp,SF,1537,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,152,156,0.83,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,13,1.00,1.00,0.00,0.00,0.26,0.12,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,293,1040,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urh_i,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,23,0.22,0.07,0.22,0.00,0.00,0.00,0.00,0.00,normal 4814,tcp,IRC,RSTR,1000,5740,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,32,13,0.41,0.06,0.03,0.00,0.03,0.08,0.38,0.92,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,25,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,71,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,175,497,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,18,255,1.00,0.00,0.06,0.01,0.06,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,1719,369,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,226,0.90,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,102,102,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,95,95,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 22,tcp,ftp,SF,235,769,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,231,43,0.19,0.03,0.00,0.00,0.00,0.00,0.01,0.05,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,6,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,686,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,99,96,0.36,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,191,1,0.01,0.15,0.12,0.00,0.00,0.00,0.13,1.00,anomaly 0,tcp,http,SF,298,4930,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,24,0.00,0.00,0.00,0.00,1.00,0.00,0.08,178,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,181,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,5,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,10,0.09,0.06,0.02,0.20,0.02,0.10,0.00,0.00,normal 0,tcp,http,SF,229,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,241,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,269,9287,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.07,0.00,0.00,0.02,0.00,normal 0,udp,domain_u,SF,44,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,316,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,307,2698,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,126,119,0.94,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,16,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,294,1721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,172,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,1718,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,255,1.00,0.00,0.02,0.03,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,230,29228,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,250,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,154,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,200,0.78,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1287,366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,239,1.00,0.00,0.12,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,6943,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,44,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.67,0.03,0.33,0.01,0.00,0.00,normal 0,tcp,http,SF,199,2200,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.08,0.00,0.00,0.00,0.46,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,18,0.00,0.00,1.00,1.00,0.17,0.07,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,31,0.00,0.00,0.00,0.00,0.53,0.07,0.00,255,96,0.38,0.06,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,netstat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,18,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,49,1,0.02,1.00,0.02,0.00,0.00,0.00,0.92,1.00,anomaly 14,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,9,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,50,0.50,0.50,0.50,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,271,2418,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,62,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,29,0.11,0.01,0.11,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,69,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,69,0.49,0.03,0.49,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,320,1272,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,50,0.00,0.00,0.00,0.00,1.00,0.00,0.04,33,54,1.00,0.00,0.03,0.11,0.00,0.00,0.00,0.00,normal 13,tcp,netbios_ssn,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.55,0.55,0.00,0.00,0.00,0.55,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,16,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,15,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,20,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,3,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,42,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,170,19109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,1921,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,57,255,1.00,0.00,0.02,0.18,0.00,0.00,0.26,0.76,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,15,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,15,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1647,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,21,145,0.67,0.14,0.05,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,16,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,86,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,170,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,897,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,117,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,162,0.64,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,254,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,113,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,1.00,1.00,0.00,0.00,1.00,0.00,0.00,77,23,0.22,0.05,0.01,0.09,1.00,0.74,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.01,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,87,1.00,0.00,0.01,0.00,0.00,0.00,0.16,0.16,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,25,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,319,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,107,255,1.00,0.00,0.01,0.08,0.00,0.00,0.57,0.65,normal 0,tcp,http,SF,218,482,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,110,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,285,15,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,15,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,278,2208,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,237,1280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,23,0.00,0.00,0.00,0.00,1.00,0.00,0.17,9,255,1.00,0.00,0.11,0.15,0.00,0.00,0.11,0.82,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,10,1.00,1.00,0.00,0.00,0.07,0.08,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6,tcp,smtp,SF,0,82,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,79,0.17,1.00,0.17,0.04,0.00,0.01,0.67,0.03,anomaly 2601,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,4,0.02,0.45,0.82,0.00,0.00,0.00,0.00,0.00,normal 6,tcp,other,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S1,5386,391074,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.07,0.00,0.00,0.93,0.50,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,188,87,0.29,0.02,0.28,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,319,9432,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.06,0.06,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.05,0.06,0.01,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,193,18,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5051,tcp,ftp_data,SF,5135678,0,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,32,1.00,0.00,1.00,0.12,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,192,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,117,0.46,0.04,0.47,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,155,9618,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,74,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,20,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,97,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,109,84,0.77,0.03,0.73,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 17105,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.72,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,0.00,0.00,0.00,0.00,0.40,0.40,0.00,255,26,0.10,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,209,1,0.00,0.22,0.20,0.00,0.00,0.00,0.21,1.00,anomaly 0,tcp,http,SF,327,1817,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,24,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,226,673,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,55,69,0.16,0.09,0.16,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,14,1.00,0.00,1.00,0.43,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,187,21002,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,55,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,197,1259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,157,11868,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 297,tcp,telnet,SF,258,1904,0,0,0,0,0,1,6,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,115,22,0.19,0.05,0.01,0.00,0.01,0.05,0.02,0.09,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,228,3420,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,325,2762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,183,1947,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,39,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,222,0.87,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,113,0.00,0.00,0.00,0.00,0.75,0.04,0.00,255,147,0.58,0.05,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,151,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,18,0.00,0.00,1.00,1.00,0.13,0.07,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,325,3751,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,6603,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,0.44,5,255,1.00,0.00,0.20,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,1128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,1,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,1,0.00,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,217,758,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,13,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,17,1.00,1.00,0.00,0.00,0.15,0.07,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,4046,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,2,255,1.00,0.00,0.50,0.03,0.00,0.02,0.00,0.02,normal 2,tcp,finger,SF,10,142,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.75,0.00,110,5,0.03,0.06,0.01,0.40,0.01,0.00,0.01,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,2,0.00,0.00,0.00,0.00,0.14,0.50,0.00,255,2,0.01,0.18,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,215,2288,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,176,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,223,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,10,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,32,0.13,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,65,169,1.00,0.00,0.02,0.04,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,212,2739,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,18,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,5,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 21866,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,11,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,118,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,169,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,87,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,174,0.00,0.00,0.00,0.00,1.00,0.00,0.00,174,174,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 32244,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.81,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,227,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 27401,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,9,1.00,1.00,0.00,0.00,0.09,0.07,0.00,149,9,0.06,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,4789,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,19,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,240,2073,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,228,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,14,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.08,0.00,0.00,1.00,0.97,normal 0,tcp,smtp,SF,746,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,151,84,0.56,0.08,0.01,0.00,0.01,0.01,0.00,0.00,normal 18338,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,18,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,18,0.07,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,235,0.92,0.01,0.92,0.00,0.00,0.00,0.01,0.00,anomaly 0,tcp,http,SF,317,682,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,142,255,1.00,0.00,0.01,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,1965,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,36,36,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,18,239,1.00,0.00,0.06,0.11,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,235,2919,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,6703,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,226,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,24,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 4,tcp,smtp,SF,3080,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,23,163,0.22,0.09,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,3,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,45,0.18,0.21,0.18,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,37,2,0.03,1.00,0.03,1.00,0.00,0.00,0.97,1.00,anomaly 0,tcp,http,SF,286,1425,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,36,0.14,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,179,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,3867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,finger,SF,9,223,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,184,11,0.04,0.03,0.01,0.18,0.00,0.00,0.01,0.00,normal 0,tcp,kshell,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.83,0.81,0.00,0.00,0.00,0.81,1.00,anomaly 0,tcp,ftp_data,SF,19,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,200,68,0.34,0.02,0.34,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,212,5723,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,761,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,120,0.32,0.05,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,233,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,19,0.00,0.00,1.00,1.00,0.13,0.06,0.00,255,19,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,190,33318,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,10,0.00,0.00,1.00,1.00,0.08,0.06,0.00,24,10,0.42,0.08,0.04,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,3,1.00,1.00,0.00,0.00,0.30,0.50,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,250,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,18,0.00,0.00,1.00,1.00,0.12,0.07,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,10,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,2168,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,40,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,1097,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,43,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,8,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,20,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,60,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,42,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.01,normal 3,tcp,ftp,SF,1242,2451,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,99,0.39,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,237,374,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,29,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,266,691,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,101,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,239,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,487,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,6329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,1,0.20,0.40,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,6,1.00,1.00,0.00,0.00,0.04,0.06,0.00,246,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1721,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.64,0.89,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,126,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,200,0.00,0.00,0.00,0.00,1.00,0.00,0.02,190,196,0.79,0.02,0.70,0.01,0.00,0.00,0.07,0.00,normal 31601,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,304,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,227,0.89,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,240,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,7,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,7,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,1727,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,238,0.93,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,32,0.14,0.05,0.14,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,SF,257,675,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,172,1,0.01,0.05,0.02,0.00,0.00,0.00,0.03,1.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,309,367,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,251,5199,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.01,0.00,0.01,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,301,301,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,270,1269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,587,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,83,0.67,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,185,11,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,322,6340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,18,1.00,1.00,0.00,0.00,0.29,0.06,0.00,255,42,0.16,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2873,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,188,118,0.63,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,79,0.43,0.29,0.43,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,31,0.12,0.03,0.12,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5929,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,119,120,0.41,0.04,0.41,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,457,457,0.00,0.00,0.00,0.00,1.00,0.00,0.00,200,200,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,977,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,44,0.88,0.06,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,314,3445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,48,48,0.00,0.00,0.00,0.00,1.00,0.00,0.00,141,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,122,1,0.01,0.61,0.61,0.00,0.05,0.00,0.59,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,167,67,0.60,0.00,0.00,0.00,0.40,0.04,0.00,255,67,0.26,0.74,0.26,0.00,0.09,0.00,0.65,0.00,anomaly 0,tcp,http,SF,216,4304,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,21,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,5989,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,13,1.00,1.00,0.00,0.00,0.50,0.12,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9,tcp,smtp,SF,1956,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,249,126,0.51,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,74,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,74,0.29,0.64,0.29,0.00,0.01,0.00,0.52,0.00,anomaly 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,201,29,0.11,0.02,0.11,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,314,1801,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,64,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,7,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,290,762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,3,1.00,0.00,1.00,0.67,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,508,1,0.09,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.93,1.00,anomaly 0,tcp,http,SF,248,2006,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,166,8561,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,6,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,15,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1631,399,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,71,140,0.31,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,6,1.00,1.00,0.00,0.00,0.13,0.11,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,182,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,4,0.00,0.00,0.00,0.00,0.80,0.40,0.00,255,22,0.09,0.01,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,5558,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,1,0.07,0.00,0.00,0.00,0.07,0.29,0.00,127,1,0.01,0.06,0.16,0.00,0.03,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,51,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,183,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,244,454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 450,tcp,telnet,SF,393,11280,0,0,0,0,0,1,2,0,0,0,0,0,1,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.07,0.00,0.00,0.95,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,8,0.00,0.00,1.00,1.00,0.06,0.07,0.00,63,8,0.13,0.10,0.02,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,228,59,0.26,0.02,0.26,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,16,0.00,0.00,1.00,1.00,0.21,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,114,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,63,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,6,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,60,0.24,0.20,0.24,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,350,2597,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,11,255,1.00,0.00,0.09,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,239,1885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,12,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,348,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,259,2169,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.50,1.00,0.00,1.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,1400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,43,50,0.00,0.00,0.00,0.02,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,3012,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,18,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1139,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,160,0.90,0.05,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,29,255,1.00,0.00,0.03,0.13,0.00,0.00,1.00,0.99,normal 0,tcp,http,SF,344,2156,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,95,81,0.37,0.04,0.37,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,56,16,1.00,1.00,0.00,0.00,0.29,0.11,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,2265,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,84,5,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,12,1.00,0.00,1.00,0.17,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,100,1.00,0.00,1.00,0.03,0.00,0.00,1.00,0.02,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,1.00,1.00,0.00,0.00,1.00,0.00,0.00,110,130,0.44,0.02,0.01,0.02,0.98,0.37,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,4,1.00,1.00,0.00,0.00,0.03,0.06,0.00,93,4,0.04,0.08,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,3,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,965,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,1.00,0.00,222,1,0.00,0.09,0.41,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,77,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,44,0.17,0.01,0.17,0.00,0.00,0.00,0.00,0.00,anomaly 17998,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,21,1.00,1.00,0.00,0.00,0.09,0.05,0.00,176,21,0.12,0.07,0.01,0.00,0.92,1.00,0.01,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,11,0.13,0.05,0.13,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,199,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,85,0.69,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 12013,tcp,telnet,SF,91,2396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,46,0.18,0.02,0.00,0.00,0.23,0.33,0.00,0.00,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,1,0.00,0.00,0.00,0.00,0.25,0.50,0.00,255,86,0.34,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 5749,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.62,0.90,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2168,402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,21,0.08,0.02,0.00,0.00,0.91,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,18,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,248,501,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,63,133,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,2159,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,118,161,0.43,0.06,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,254,1.00,0.00,0.20,0.21,0.00,0.01,1.00,0.90,normal 0,tcp,http,SF,164,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,15128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,264,1254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,19,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,339,1366,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,8737,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,11,0.00,0.00,0.00,0.00,0.92,0.17,0.00,28,17,0.61,0.14,0.61,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,199,1705,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,21,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,192,192,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,206,0.81,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,8,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,2022,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,4,0.00,0.00,1.00,1.00,0.04,0.09,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,216,912,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,24,0.00,0.00,0.00,0.00,1.00,0.00,0.17,157,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,37,0.20,0.02,0.20,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,216,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,198,5,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,291,833,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,2320,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,288,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.70,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,342,386,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 107,tcp,http,SF,298,256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,241,0.95,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 13113,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,322,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,152,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,116,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,212,1227,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,6,1.00,0.00,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,99,15,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,193,207,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,6,0.00,0.00,0.00,0.00,1.00,0.00,0.50,21,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,338,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,37,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,13,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,175,1,0.01,0.07,0.04,0.00,0.00,0.00,0.05,1.00,anomaly 0,tcp,http,SF,200,10914,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,255,1.00,0.00,0.05,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,175,175,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1173,315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,113,120,0.54,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,83,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,264,264,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,202,0.79,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,17,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,289,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,5,1.00,1.00,0.00,0.00,0.08,0.09,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,1768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,4,1.00,1.00,0.00,0.00,0.08,0.12,0.00,255,16,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,8,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,231,8597,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,362,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,29,0.00,0.00,0.00,0.00,1.00,0.00,0.07,64,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,239,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,1,0.00,0.00,0.00,0.00,0.17,0.33,0.00,66,28,0.42,0.05,0.42,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,595,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,48,0.19,0.02,0.19,0.00,0.52,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,150,0.59,0.01,0.59,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,23,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,3,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,287,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,37,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,88,0.33,0.05,0.33,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,221,275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,109,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,2,0.94,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,93,4,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,2,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,9,1.00,1.00,0.00,0.00,0.19,0.09,0.00,255,59,0.23,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,5,1.00,1.00,0.00,0.00,0.16,0.12,0.00,255,45,0.18,0.03,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,5839,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,6601,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,75,0.29,0.02,0.13,0.00,0.65,0.56,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,48,2,0.02,1.00,0.02,1.00,0.00,0.00,0.98,1.00,anomaly 0,tcp,http,SF,287,20502,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,3,0.00,0.00,1.00,1.00,0.25,0.17,0.00,255,23,0.09,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,237,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,231,28,0.12,0.05,0.12,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,17,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,35,0.14,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,228,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,19,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,1,1.00,1.00,0.00,0.00,0.02,0.09,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,297,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,256,2381,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,110,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,238,0.93,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,203,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.36,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.01,normal 0,tcp,http,SF,287,74301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,1968,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,92,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,22,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,3,151,1.00,0.00,1.00,0.10,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,893,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,22,0.00,0.00,0.00,0.00,1.00,0.00,0.14,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,7596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,255,1.00,0.00,0.06,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,284,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,10,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,687,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,21,137,0.57,0.14,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,259,398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,136,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,261,29122,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,14,0.99,1.00,0.00,0.00,0.11,0.06,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,232,260,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.00,0.00,0.03,0.03,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,77,0.30,0.12,0.93,0.00,0.00,0.00,0.07,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,3,1.00,1.00,0.00,0.00,0.23,0.23,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,302,2348,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,75,0.00,0.00,0.00,0.00,1.00,0.00,0.00,147,75,0.51,0.03,0.51,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,348,1170,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,35,0.00,0.00,0.00,0.00,1.00,0.00,0.09,244,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,61298,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,48,0.19,0.04,0.19,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,25,1.00,1.00,0.00,0.00,0.19,0.05,0.00,255,25,0.10,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,184,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,205,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 6,tcp,smtp,SF,1234,342,0,0,0,0,0,1,0,0,0,0,0,0,2,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,49,170,0.84,0.06,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,124,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,1,1.00,1.00,0.00,0.00,0.02,0.10,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,7,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,7,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,15,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,292,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,337,1535,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,28,0.00,0.00,0.00,0.00,1.00,0.00,0.07,43,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,2,0.00,0.00,1.00,1.00,0.05,0.55,0.00,212,2,0.01,0.11,0.20,0.00,0.01,0.00,0.43,1.00,anomaly 0,tcp,http,SF,297,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,2191,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,114,0.45,0.02,0.45,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,119,1.00,0.00,1.00,0.45,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,145,1,0.01,0.33,0.32,0.00,0.00,0.00,0.32,1.00,anomaly 0,udp,domain_u,SF,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,162,18,0.11,0.04,0.11,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,161,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,12,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,12,0.00,0.00,0.00,0.00,0.46,0.12,0.00,255,12,0.05,0.76,0.26,0.00,0.16,0.00,0.58,0.00,anomaly 0,tcp,uucp_path,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,215,1,0.00,0.54,0.54,0.00,0.00,0.00,0.54,1.00,anomaly 0,tcp,http,SF,258,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,10,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,269,9317,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,557,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,42,255,1.00,0.00,0.02,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,155,4,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,4,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,225,1364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.01,0.00,0.00,0.04,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,4,1.00,1.00,0.00,0.00,0.04,0.08,0.00,57,4,0.07,0.14,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,112,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,11,0.00,0.00,1.00,1.00,0.13,0.08,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,148,10344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,10,255,1.00,0.00,0.10,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.01,0.00,0.00,1.00,0.24,normal 0,tcp,http,SF,328,1579,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,34,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,187,183,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.39,0.37,0.00,0.00,0.00,0.38,1.00,anomaly 0,tcp,http,SF,215,817,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.50,0.20,0.00,0.00,1.00,0.00,0.60,2,255,1.00,0.00,0.50,0.01,0.50,0.01,0.00,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,9,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,3,67,1.00,0.00,0.33,0.31,0.00,0.00,1.00,1.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1470,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,35,57,0.60,0.09,0.60,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,211,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,262,11785,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,118,154,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,298,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,28,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,917,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,402,5324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,11,0.00,0.00,1.00,1.00,0.17,0.09,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,24,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,278,1747,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.67,0.00,0.00,1.00,0.00,0.67,105,255,1.00,0.00,0.01,0.01,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,6,0.96,1.00,0.04,0.00,0.24,0.20,0.00,255,48,0.19,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,IRC,S1,251,1070,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,50,14,0.28,0.04,0.02,0.00,0.02,0.07,0.22,0.79,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,16,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,16,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,52,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,2,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,31,0.12,0.03,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,5,1.00,1.00,0.00,0.00,0.33,0.27,0.00,255,65,0.25,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,232,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,1041,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 8,tcp,uucp,SF,6,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,510,1,0.20,0.00,0.79,0.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.23,0.00,0.75,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,268,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,SF,10,288,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,12,0.04,0.18,0.04,0.17,0.00,0.08,0.00,0.00,normal 15,tcp,auth,SF,9,37,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,14,0.05,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,25,251,1.00,0.00,0.04,0.17,0.00,0.00,1.00,1.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,16,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,15,0.06,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 14,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,12,0.60,0.15,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,36,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,70,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 96,tcp,http,SF,275,546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 23,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,20,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,717,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,245,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 8417,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,2,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,8,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,271,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,229,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,213,0.84,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,67,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,tcp,http,SF,357,1695,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 10120,tcp,ftp,SF,1020,2201,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.02,0.00,0.00,0.16,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,3,1.00,1.00,0.00,0.00,0.05,0.08,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,19,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,76,0.36,0.02,0.36,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,7,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,29,9,0.31,0.10,0.31,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,6601,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,233,101,0.43,0.02,0.43,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,35,1,0.17,0.00,0.83,1.00,0.03,1.00,0.00,255,1,0.00,0.46,0.00,0.00,0.02,0.00,0.13,1.00,anomaly 0,udp,domain_u,SF,30,90,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,23,0.81,0.00,0.00,0.00,0.19,0.06,0.00,255,23,0.09,0.91,0.09,0.00,0.09,0.00,0.82,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,821,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,36,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,3,0.09,0.09,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,8,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,217,3669,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,49,1.00,0.00,0.06,0.10,0.00,0.00,0.00,0.00,normal 14,udp,domain_u,SF,109,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,66,49,0.74,0.03,0.74,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,17,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,9,0.00,0.00,0.00,0.00,1.00,0.00,0.56,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,227,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,145,32395,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 25,tcp,ftp,SF,241,777,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,163,34,0.21,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 27720,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,312,7764,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,4,1.00,1.00,0.00,0.00,0.02,0.05,0.00,11,4,0.36,0.27,0.09,0.00,0.82,1.00,0.00,0.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,132,165,0.61,0.04,0.02,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,smtp,SF,659,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,101,0.34,0.02,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,4,1.00,1.00,0.00,0.00,0.44,0.33,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,328,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,15,1.00,0.00,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,255,1712,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,41,255,1.00,0.00,0.02,0.02,0.00,0.01,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,40,0.16,0.05,0.16,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,http,SF,188,265,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 27,tcp,ftp,SF,1489,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,171,36,0.21,0.04,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,225,225,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,4,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,4,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,remote_job,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,10,1.00,0.00,1.00,0.20,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,20,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,29,1.00,0.00,1.00,0.14,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,9,1.00,1.00,0.00,0.00,0.05,0.06,0.00,56,7,0.12,0.16,0.02,0.00,0.75,1.00,0.02,0.00,anomaly 0,tcp,http,SF,211,2131,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,233,0.91,0.01,0.91,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,8,0.14,0.07,0.14,0.00,0.00,0.00,0.02,0.00,normal 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,125,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.10,0.00,0.00,1.00,0.98,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5849,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.57,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,22,1.00,0.00,0.20,0.09,0.00,0.09,1.00,0.27,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,160,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 7025,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.84,1.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,131,0.51,0.01,0.51,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,7,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,7,0.03,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,81,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,233,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,5658,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,0.33,1.00,0.00,0.67,25,255,1.00,0.00,0.04,0.11,0.00,0.00,1.00,0.81,normal 0,tcp,http,SF,201,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,37,0.00,0.00,0.00,0.00,1.00,0.00,0.08,103,215,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,59,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,75,0.45,0.03,0.45,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,129,1,0.01,0.25,0.24,0.00,0.00,0.00,0.23,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,20,1.00,1.00,0.00,0.00,0.20,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,221,599,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 9257,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,225,2,0.01,0.16,0.27,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.12,0.00,0.00,1.00,0.65,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,1,0.00,0.00,1.00,1.00,0.01,0.09,0.00,255,1,0.00,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,193,412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,20,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,293,18,0.00,0.00,1.00,1.00,0.06,0.05,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,112,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 4,tcp,smtp,SF,1479,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,178,0.98,0.03,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,174,0.68,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,377,14319,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,11,1.00,0.09,0.00,0.00,1.00,0.00,0.18,178,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,7,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,217,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,288,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,13,255,1.00,0.00,0.08,0.16,0.00,0.00,1.00,0.93,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,16,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,184,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,54,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,54,0.21,0.64,0.21,0.00,0.01,0.00,0.52,0.00,anomaly 0,tcp,http,SF,336,1454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,42,0.00,0.00,0.00,0.00,1.00,0.00,0.07,18,255,1.00,0.00,0.06,0.07,0.00,0.01,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,23,1.00,1.00,0.00,0.00,0.19,0.04,0.00,255,23,0.09,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,355,2142,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,2,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,213,12863,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,6,1.00,1.00,0.00,0.00,0.19,0.16,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,331,6162,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,317,1927,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,30,0.00,0.00,0.00,0.00,1.00,0.00,0.10,119,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,110,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,854,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,8,54,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,39,0.20,0.03,0.20,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1759,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,125,172,0.54,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,224,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1794,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,105,99,0.36,0.06,0.01,0.02,0.01,0.01,0.01,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,2,1.00,1.00,0.00,0.00,0.09,0.18,0.00,255,61,0.24,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,6,1.00,1.00,0.00,0.00,0.16,0.11,0.00,255,62,0.24,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,19,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,19,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,214,0.84,0.02,0.84,0.00,0.00,0.00,0.02,0.00,anomaly 0,tcp,http,SF,178,3118,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.00,0.00,0.03,0.03,0.00,0.00,normal 2474,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.71,0.87,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,113,0.44,0.02,0.44,0.00,0.01,0.00,0.02,0.00,anomaly 0,tcp,http,SF,266,5230,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,6,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,634,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,ftp,SF,1235,2449,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,79,0.31,0.02,0.00,0.00,0.00,0.00,0.00,0.00,anomaly 31,tcp,ftp,SF,335,1063,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,53,0.21,0.02,0.00,0.00,0.00,0.00,0.03,0.11,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,270,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,1533,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,200,308,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,1667,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 5,tcp,http,SF,180,1977,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,107,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,15,0.00,0.00,0.00,0.00,1.00,0.00,0.20,131,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,137,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,166,0.65,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,23,106,1.00,0.00,0.04,0.20,0.00,0.00,1.00,1.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,167,163,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,76,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,130,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,201,0.79,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,4,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,29,29,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,8,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,185,13635,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,15,0.00,0.00,0.00,0.07,1.00,0.00,0.20,161,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,259,1001,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,282,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,214,0.84,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 8197,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.64,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,10,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,9,1.00,1.00,0.00,0.00,0.50,0.11,0.00,255,49,0.19,0.04,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1009,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,192,166,0.67,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,161,1,0.01,0.94,0.95,0.00,0.95,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,259,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,142,55,0.39,0.02,0.39,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,726,339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,167,155,0.84,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,1058,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,346,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,107,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,2241,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,2195,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,48,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,47,7,0.00,0.00,0.00,0.00,0.15,0.04,0.00,255,23,0.09,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,22,1.00,1.00,0.00,0.00,0.81,0.07,0.00,255,22,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,1733,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,2196,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,32,0.05,0.03,0.00,0.00,1.00,0.00,0.12,226,255,1.00,0.00,0.00,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,10,1.00,1.00,0.00,0.00,0.38,0.12,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,3,1.00,1.00,0.00,0.00,0.38,0.25,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,4,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1041,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,224,156,0.70,0.03,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,22,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,60,0.23,0.05,0.23,0.03,0.00,0.00,0.02,0.00,normal 2,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,8,1.00,0.00,0.12,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,12,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,55,154,1.00,0.00,0.02,0.19,0.00,0.00,1.00,1.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,27,0.00,0.00,0.04,0.00,0.96,0.07,0.00,255,27,0.11,0.02,0.11,0.00,0.00,0.00,0.69,0.00,anomaly 0,tcp,http,SF,239,128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,311,1628,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,18,1.00,1.00,0.00,0.00,0.25,0.05,0.00,255,58,0.23,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,205,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,25,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,186,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,2999,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,52,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,263,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1158,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,32,179,0.62,0.09,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,12,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,294,1600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1086,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,95,0.37,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,10044,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,242,138,0.55,0.01,0.55,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,1469,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,8,0.00,0.00,0.00,0.00,0.35,0.13,0.00,255,15,0.06,0.81,0.21,0.00,0.03,0.00,0.76,0.00,anomaly 0,tcp,http,SF,305,3222,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,209,199,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,1680,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,115,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,234,0.92,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,3,0.77,0.67,0.23,0.33,0.03,0.37,0.00,255,3,0.01,0.13,0.35,0.00,0.27,0.67,0.08,0.33,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,13,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,331,868,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,233,19796,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,185,255,1.00,0.00,0.01,0.02,0.00,0.01,0.14,0.12,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,25,0.16,0.02,0.16,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,112,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,183,229,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,359,779,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,255,1.00,0.00,0.01,0.02,0.00,0.00,0.08,0.06,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,15,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,275,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,222,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,39,0.38,0.04,0.38,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,163,1.00,0.00,0.20,0.04,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,323,5340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,258,8705,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,27,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,116,1,0.01,0.59,0.59,0.00,0.05,0.00,0.57,1.00,anomaly 0,tcp,http,SF,298,1108,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,21,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,4,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,116,0.45,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,6,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,SF,48,473,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,46,1,0.00,0.00,0.00,0.00,0.02,0.04,0.00,255,1,0.00,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,14,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,53,0.21,0.20,0.21,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,279,1026,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,456,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,224,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,118,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,17,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,224,2109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,241,241,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,2867,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,44,112,0.16,0.07,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,256,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,91,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,873,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,other,SF,7940,0,0,0,0,0,0,1,0,0,0,0,2,0,0,0,0,0,9,1,0.11,0.00,0.00,0.00,0.11,0.22,0.00,255,1,0.00,0.07,0.37,0.00,0.02,0.00,0.00,0.00,normal 1,tcp,smtp,SF,660,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,107,0.42,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,268,2238,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,154,19175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.05,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,144,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,29165,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,255,1.00,0.00,0.05,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,25,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,852,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,41,0.16,0.02,0.16,0.00,0.00,0.00,0.73,0.00,normal 0,udp,domain_u,SF,45,123,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,1,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,20,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,16,0.06,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,137,0.54,0.02,0.54,0.00,0.01,0.00,0.02,0.00,anomaly 0,tcp,smtp,SF,1633,483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,110,0.28,0.03,0.01,0.02,0.01,0.00,0.35,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,236,0.00,0.00,0.00,0.00,1.00,0.00,0.00,236,236,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 2009,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,1,0.00,0.53,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,10496,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,17,255,1.00,0.00,0.06,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,328,2793,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,7,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,250,1.00,0.00,0.50,0.18,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,334,279,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,310,1686,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.00,0.00,1.00,0.00,0.00,84,255,1.00,0.00,0.01,0.03,0.01,0.01,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,28,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,109,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,317,756,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,sql_net,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,161,5,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.21,0.02,0.00,0.20,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,208,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,163,19076,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.13,0.13,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,10,1.00,1.00,0.00,0.00,0.12,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,206,2398,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,23,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,276,2543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,85,6,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1372,401,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,59,0.23,0.05,0.00,0.00,0.50,0.00,0.02,0.00,normal 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,20,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1896,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.54,0.87,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,pop_3,SF,35,130,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,222,3,0.01,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,141,0.00,0.00,0.00,0.00,1.00,0.00,0.01,239,119,0.50,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,5,1.00,1.00,0.00,0.00,0.19,0.22,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,22,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,218,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,947,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,179,0.87,0.06,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,14,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,domain,RSTO,6,28,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,56,1,0.02,0.00,0.91,1.00,0.02,1.00,0.00,255,1,0.00,0.25,0.00,0.00,0.00,0.00,0.21,1.00,anomaly 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,201,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,221,0.87,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,34,1.00,0.00,1.00,0.15,0.00,0.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,1.00,1.00,0.00,0.00,1.00,0.00,0.00,181,101,0.56,0.01,0.01,0.00,0.99,0.98,0.00,0.00,anomaly 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,20,0.00,0.00,1.00,1.00,0.14,0.05,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,14,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,433,1,0.05,0.00,0.93,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.08,0.00,0.92,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,212,0.83,0.03,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,9784,325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,26,166,0.81,0.08,0.04,0.01,0.00,0.00,0.00,0.00,normal 8337,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.67,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,318,525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,128,255,1.00,0.00,0.01,0.01,0.02,0.01,0.02,0.01,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,2,0.00,0.00,0.00,0.00,0.67,0.67,0.00,241,102,0.41,0.02,0.41,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,152,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.03,0.00,0.97,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,http,SF,301,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,216,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,30,9,0.00,0.00,0.00,0.00,0.30,0.10,0.00,255,9,0.04,0.87,0.14,0.00,0.10,0.00,0.76,0.00,anomaly 0,tcp,http,SF,197,27919,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 2713,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.86,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,263,8020,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,155,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,25,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,377,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,32,255,1.00,0.00,0.03,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,300,1195,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,37,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,216,0.85,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,22,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,2201,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,101,0.40,0.05,0.01,0.02,0.01,0.01,0.01,0.00,normal 0,icmp,urp_i,SF,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,4,0.02,0.01,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,22,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,509,1,0.05,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.05,0.00,0.95,1.00,anomaly 0,tcp,http,SF,309,10929,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,10,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2705,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,4,0.02,0.35,0.76,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,18,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,15,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,230,10113,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,152,152,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,1429,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,2095,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,124,0.49,0.02,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,46,86,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,247,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1787,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,182,170,0.66,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 26628,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 20252,tcp,telnet,RSTO,737,112155,0,0,0,0,0,1,457,1,2,508,0,0,2,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,54,14,0.26,0.11,0.02,0.00,0.02,0.07,0.04,0.14,normal 0,tcp,http,SF,304,1762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,74,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,11,0.00,0.00,1.00,1.00,0.10,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1470,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,71,30,0.42,0.04,0.42,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,491,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,36,0.06,0.08,0.06,0.08,0.00,0.00,0.03,0.00,normal 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,31,1.00,0.00,1.00,0.10,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,79,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,1018,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,218,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.19,0.16,0.00,0.00,0.00,0.17,1.00,anomaly 0,udp,domain_u,SF,36,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,102,205,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,244,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,200,0.78,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,3617,282,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,169,140,0.56,0.03,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,195,178,0.91,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,187,887,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.80,96,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,4892,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,54,0.21,0.02,0.21,0.00,0.00,0.00,0.69,0.00,normal 5470,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,10389,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,116,0.38,0.02,0.38,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,11214,1551,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,6,185,0.50,0.33,0.17,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,810,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,31,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,15,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,13239,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,18,71,0.78,0.17,0.78,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.02,0.02,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,18,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,171,171,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,11,0.14,0.02,0.14,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,66,19,1.00,1.00,0.00,0.00,0.29,0.06,0.00,228,59,0.26,0.02,0.01,0.00,0.99,1.00,0.00,0.00,anomaly 13967,tcp,telnet,SF,201,43347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,32,0.13,0.04,0.00,0.00,0.20,0.00,0.02,0.12,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,19,1.00,1.00,0.00,0.00,0.17,0.08,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.34,0.72,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,301,511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,51,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,660,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,165,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,37,8,0.05,0.08,0.03,0.25,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,263,1053,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,243,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,private,RSTOS0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,2,0.70,0.50,0.30,0.50,0.20,0.50,0.00,255,2,0.01,0.02,0.04,0.00,0.03,0.50,0.01,0.50,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,819,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,29,74,0.72,0.14,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,smtp,SF,1119,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,149,151,0.46,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,2486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,4,151,0.75,0.50,0.75,0.04,0.25,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,3,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,3,0.01,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,8,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,8,0.03,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1302,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,30,27,0.90,0.10,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,15,0.06,0.02,0.06,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.21,0.01,0.00,0.21,0.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,12,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,39,14,0.00,0.00,0.00,0.00,0.36,0.10,0.00,255,59,0.23,0.29,0.75,0.00,0.07,0.00,0.17,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,24,1.00,1.00,0.00,0.00,0.22,0.06,0.00,255,6,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,3629,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,231,231,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,373,345,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,udp,domain_u,SF,68,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1981,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,13,129,0.92,0.15,0.08,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,43,0.17,0.51,0.17,0.00,0.51,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,16,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,34,0.13,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,23,2,0.04,1.00,0.04,1.00,0.00,0.00,0.83,1.00,anomaly 32038,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,60,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,134,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 297,tcp,http,SF,339,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,1,0.08,0.23,0.08,0.00,0.54,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,189,24,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,24,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,226,6,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,5583,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,188,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,700,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,6,255,1.00,0.00,0.17,0.01,0.17,0.00,0.00,0.00,normal 0,tcp,http,SF,314,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,27,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,12,1.00,1.00,0.00,0.00,0.07,0.08,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,12,1.00,1.00,0.00,0.00,0.25,0.12,0.00,255,12,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,336,11283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,4,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,6,1.00,1.00,0.00,0.00,0.23,0.08,0.00,48,10,0.17,0.06,0.06,0.20,0.96,0.60,0.00,0.00,anomaly 0,tcp,http,SF,229,1003,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,45,0.00,0.00,0.00,0.00,1.00,0.00,0.04,110,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,238,12,0.05,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.60,0.95,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,275,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,rje,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,6,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,229,182,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,20,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,38,0.15,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,5,0.02,0.98,0.02,0.00,0.97,0.00,0.00,0.00,normal 0,tcp,http,SF,213,2019,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,1564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,9,0.00,0.00,0.00,0.00,1.00,0.00,0.22,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,251,1.00,0.00,0.12,0.07,0.00,0.00,1.00,0.49,normal 4229,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.53,0.90,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,289,2920,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.33,0.33,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.05,0.04,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,20,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,227,2809,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,109,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 11,tcp,smtp,SF,1103,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,82,0.39,0.03,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,319,525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,82,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,159,160,0.00,0.00,0.00,0.00,0.99,0.01,0.02,255,250,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,59,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,1,0.08,0.00,0.00,0.00,0.08,0.33,0.00,228,1,0.00,0.04,0.40,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,209,315,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,8,313,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,20,0.06,0.04,0.02,0.10,0.00,0.85,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,58,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 3,tcp,smtp,SF,1415,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,136,0.80,0.05,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.09,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,333,1832,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,135,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,35,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,255,249,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,246,757,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,58,58,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,58,0.23,0.04,0.23,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,272,8,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,8,0.03,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,283,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,569,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,31,147,0.77,0.10,0.03,0.01,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,2117,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,67,57,0.85,0.06,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,227,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,9,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,42,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,332,2344,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,124,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,3100,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,9,255,1.00,0.00,0.11,0.09,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,2,0.00,0.00,0.00,0.00,0.08,0.24,0.00,255,2,0.01,0.65,0.44,0.00,0.00,0.00,0.56,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,16,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,9,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,1215,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.17,0.17,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,15,0.00,0.00,1.00,1.00,0.14,0.06,0.00,255,15,0.06,0.05,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.13,0.12,0.00,0.00,0.00,0.12,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,15,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,326,14483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,101,255,1.00,0.00,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,23,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,23,0.09,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.64,0.63,0.00,0.00,0.00,0.63,1.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,24,1.00,1.00,0.00,0.00,0.18,0.04,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,271,823,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_dgm,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,60,13,1.00,1.00,0.00,0.00,0.22,0.10,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,9,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 6,tcp,smtp,SF,1299,389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,238,4,1.00,0.00,0.00,0.00,0.00,0.06,1.00,255,53,0.21,0.09,0.00,0.00,0.64,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,2,1.00,1.00,0.00,0.00,0.04,0.13,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,119,5,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,6,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,17,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,33,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,241,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,148,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,16,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,128,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.30,8,255,1.00,0.00,0.12,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,270,7321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,16,0.00,0.00,0.00,0.00,1.00,0.00,0.25,172,255,1.00,0.00,0.01,0.02,0.01,0.01,0.01,0.00,normal 0,udp,domain_u,SF,45,114,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,255,241,0.95,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 8895,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,1.00,1.00,0.00,0.00,1.00,0.00,0.00,66,136,0.36,0.03,0.02,0.01,0.97,0.18,0.00,0.00,anomaly 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,128,0.00,0.00,0.00,0.00,1.00,0.00,0.00,128,128,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,11,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,courier,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,107,11,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,11,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,1226,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,195,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,294,16,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,6148,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,2,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,12,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,25,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,5,1.00,1.00,0.00,0.00,0.16,0.13,0.00,255,60,0.24,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,199,8564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,1296,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 30679,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,200,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,23,33,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,275,2295,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,211,211,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,14,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,202,1032,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,14,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1346,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,249,134,0.52,0.02,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,525,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,77,255,1.00,0.00,0.01,0.07,0.01,0.01,0.00,0.00,normal 28,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,0.33,0.67,0.50,89,86,0.97,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,10622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,13772,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,68,4,0.06,0.04,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,1211,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,253,468,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,6672,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,829,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,37,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,97,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,76,71,0.49,0.07,0.49,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,38,0.15,0.11,0.15,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,88,8,0.00,0.00,1.00,1.00,0.09,0.08,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,OTH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,1,0.01,0.70,0.70,0.00,0.04,0.00,0.63,0.00,anomaly 0,tcp,http,SF,301,1779,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,97,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,354,3540,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,29,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,232,0.91,0.01,0.91,0.00,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,614,329,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,148,0.58,0.02,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,224,2649,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,12,1.00,1.00,0.00,0.00,0.10,0.07,0.00,19,12,0.63,0.16,0.05,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,255,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,259,749,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,108,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,223,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,109,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,108,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,247,45,0.18,0.03,0.15,0.00,0.00,0.00,0.01,0.00,normal 0,tcp,http,SF,316,354,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,13,255,1.00,0.00,0.08,0.11,0.00,0.00,1.00,0.72,normal 0,udp,domain_u,SF,42,116,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,168,168,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,288,726,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,14,255,1.00,0.00,0.07,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,277,56851,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,164,1.00,0.00,0.08,0.13,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1807,454,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,145,148,0.66,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,302,301,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,224,0.88,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,27,1,0.00,0.00,0.00,0.00,0.04,0.19,0.00,255,1,0.00,0.16,0.50,0.00,0.00,0.00,0.44,0.00,anomaly 0,tcp,http,SF,195,40975,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,208,2067,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,26,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,516,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,9,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,244,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,884,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,6,54,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,217,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,341,611,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,160,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,264,2055,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,35,35,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,109,0.43,0.09,0.43,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,207,1511,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,255,1.00,0.00,0.02,0.03,0.02,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,23,0.09,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 347,tcp,telnet,SF,324,10957,0,0,0,0,0,1,3,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,23,0.09,0.06,0.00,0.00,0.76,0.65,0.01,0.09,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,19,1.00,1.00,0.00,0.00,0.14,0.07,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,48,12,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,1,0.06,1.00,0.94,0.00,0.01,0.58,0.00,255,1,0.00,0.33,0.57,0.00,0.04,1.00,0.53,0.00,anomaly 0,tcp,http,SF,205,1042,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,114,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,24,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,299,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,224,1636,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,51,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,241,702,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,5,255,1.00,0.00,0.20,0.04,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,802,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,158,0.63,0.03,0.01,0.01,0.01,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.50,0.33,0.00,0.00,1.00,0.00,0.67,194,255,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1030,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,140,12,0.09,0.04,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,1.00,0.00,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,http,SF,255,37867,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,290,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,23,0.05,0.04,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,16,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,12,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,73,0.29,0.20,0.29,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,1,0.00,0.00,0.00,0.00,0.06,0.29,0.00,255,1,0.00,0.26,0.77,0.00,0.00,0.00,0.20,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,471,1,0.07,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.05,0.00,0.95,1.00,anomaly 0,tcp,http,SF,244,515,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,47,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,252,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,142,62,0.27,0.04,0.27,0.03,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,4263,365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,137,192,0.80,0.08,0.01,0.01,0.03,0.02,0.00,0.00,normal 0,tcp,http,SF,222,866,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1363,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,194,71,0.37,0.03,0.37,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,62,1.00,0.00,0.20,0.24,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,211,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,383,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,117,0.46,0.02,0.46,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,17,1.00,1.00,0.00,0.00,0.37,0.09,0.00,196,16,0.08,0.07,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,1,0,0,0,9,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,7,0.28,0.08,0.28,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,14,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,11,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,298,711,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,23,1.00,1.00,0.00,0.00,0.18,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,151,193,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,347,4960,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 190,tcp,http,SF,293,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,169,9,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,200,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,206,0.81,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,252,252,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,anomaly 0,udp,ntp_u,SF,48,48,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,144,0.56,0.01,0.56,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,710,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,26,26,0.00,0.00,0.00,0.00,1.00,0.00,0.00,178,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,758,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,96,0.47,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,423,705,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,6,255,1.00,0.00,0.17,0.04,0.00,0.00,0.00,0.04,normal 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.50,0.92,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,7162,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,61,0.24,0.02,0.24,0.00,0.37,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,17,1.00,1.00,0.00,0.00,0.17,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,269,17,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,260,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,20,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,10,0.06,0.02,0.06,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,234,23776,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,236,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,117,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,219,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,226,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,292,2762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,350,1483,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,186,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,844,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.05,0.05,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,110,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.07,0.00,0.91,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.91,1.00,anomaly 0,udp,domain_u,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,4,0.00,0.00,0.00,0.00,0.18,0.14,0.00,255,4,0.02,0.91,0.10,0.00,0.03,0.00,0.87,0.00,anomaly 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,184,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,250,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,41,9,1.00,1.00,0.00,0.00,0.22,0.12,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,30,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,158,147,0.93,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 8,tcp,smtp,SF,2552,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,126,84,0.67,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,340,314,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,255,1.00,0.00,0.01,0.04,0.00,0.01,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,3,0.00,0.00,1.00,1.00,0.02,0.06,0.00,255,3,0.01,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,204,1109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,167,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,21,0.25,0.07,0.25,0.00,0.02,0.00,0.04,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,22,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,80,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 7,tcp,time,SF,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,23,1.00,0.00,0.04,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,309,390,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,43,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,62,0.24,0.02,0.01,0.00,0.87,0.97,0.00,0.00,normal 0,tcp,private,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,16,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,6,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,298,6515,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,104,0.41,0.02,0.41,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,5,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,2965,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,5316,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,167,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,156,146,0.00,0.00,0.00,0.00,0.94,0.01,0.00,255,208,0.82,0.03,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,319,9569,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,3005,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,246,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,2,0.01,0.79,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,172,15,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,295,3350,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,18,255,1.00,0.00,0.06,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,115,255,1.00,0.00,0.02,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.18,0.00,0.82,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.87,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,16,1.00,1.00,0.00,0.00,0.11,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1576,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,172,165,0.72,0.03,0.01,0.01,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,208,396,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,36,0.00,0.00,0.00,0.00,1.00,0.00,0.06,23,255,1.00,0.00,0.04,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,218,302,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,39,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,1058,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,175,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,4,4,0.25,0.25,0.25,0.25,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.06,0.06,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,114,1,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,291,16,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,31,0.12,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,25,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,981,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,239,162,0.62,0.03,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,312,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,15,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,41,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,179,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,43,19,0.00,0.00,0.00,0.00,0.44,0.07,0.00,255,19,0.07,0.23,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,218,1721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,3245,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,20,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,208,706,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,28,28,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,683,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,98,20,1.00,1.00,0.00,0.00,0.20,0.05,0.00,255,20,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,76,8,0.11,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,210,105,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,83,255,1.00,0.00,0.01,0.05,0.00,0.01,0.00,0.00,normal 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,18,14,0.78,0.11,0.06,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,238,20,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,2,1.00,1.00,0.00,0.00,0.02,0.08,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,173,11889,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,33,1.00,0.00,0.50,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,1214,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,34,0.39,0.07,0.39,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,131,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,228,0.89,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,37,97,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,42,26,0.62,0.07,0.02,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1348,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,32,65,0.41,0.06,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,230,27137,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.43,46,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 5,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,45,36,0.80,0.07,0.07,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,260,389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,64,0.00,0.00,0.00,0.00,1.00,0.00,0.00,176,82,0.47,0.04,0.47,0.00,0.01,0.00,0.36,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,102,16,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,26,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,92,255,1.00,0.00,0.01,0.11,0.00,0.00,0.67,0.78,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,2,0.00,0.00,1.00,1.00,0.01,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,213,7203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,86,9,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,201,4080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,158,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,111,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,201,201,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,21,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,331,1907,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,67,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,12,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,985,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,1.00,158,135,0.39,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,284,5989,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,14,0.00,0.00,0.00,0.00,1.00,0.00,0.21,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,76,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,248,22,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,22,0.09,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,269,10229,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,0.15,45,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,329,3432,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,290,12,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,43,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,124,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 23,tcp,ftp,SF,241,774,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,57,0.22,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,290,3084,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,255,1.00,0.00,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,14,0.00,0.00,1.00,1.00,0.12,0.06,0.00,255,14,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,350,280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,5,0.02,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,260,774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,1,0.00,0.00,0.00,0.00,0.07,0.79,0.00,255,1,0.00,0.46,0.66,0.00,0.03,0.00,0.31,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTR,36256,5840,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.04,0.04,anomaly 0,udp,domain_u,SF,45,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,95,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,246,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,43,1.00,0.00,1.00,0.14,0.00,0.02,0.00,0.00,anomaly 0,udp,domain_u,SF,37,118,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,56,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.16,0.00,0.00,1.00,0.83,normal 0,tcp,http,SF,256,870,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,144,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,72,45,0.22,0.06,0.22,0.07,0.00,0.00,0.00,0.00,normal 7,tcp,smtp,SF,1381,340,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,178,0.74,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,1,0.10,0.00,0.89,1.00,0.01,1.00,0.00,255,1,0.00,0.88,0.00,0.00,0.07,0.00,0.67,1.00,anomaly 0,tcp,smtp,SF,810,326,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,119,0.60,0.03,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,198,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,6,0.00,0.00,0.00,0.00,1.00,0.00,0.67,23,255,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,43,1.00,0.00,1.00,0.07,0.00,0.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1077,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,100,153,0.81,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.40,0.00,255,233,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,181,9,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,69,18,0.99,1.00,0.01,0.00,0.26,0.07,0.00,255,33,0.13,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,7,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,pop_2,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,17,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,243,243,1.00,0.00,0.00,0.00,0.00,0.00,0.05,0.05,anomaly 786,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.78,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,13,1.00,1.00,0.00,0.00,0.62,0.10,0.00,221,54,0.24,0.02,0.00,0.04,1.00,0.98,0.00,0.00,anomaly 0,tcp,http,SF,237,4428,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,255,1.00,0.00,0.04,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,343,4154,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.20,0.20,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 8337,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.65,0.88,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,97,0.38,0.19,0.38,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,715,329,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,18,33,0.78,0.22,0.06,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,4768,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,242,3189,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,142,26866,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,111,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,3,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,125,255,1.00,0.00,0.01,0.15,0.00,0.00,0.22,0.60,normal 0,tcp,supdup,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,193,1,0.01,0.49,0.49,0.00,0.00,0.00,0.49,1.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,9,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,9,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4661,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.74,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,225,16,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,10,1.00,1.00,0.00,0.00,0.16,0.07,0.00,255,10,0.04,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,22,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,62,59,0.95,0.03,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,133,1,0.01,0.64,0.64,0.00,0.05,0.00,0.62,1.00,anomaly 0,tcp,printer,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,17,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,425,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,38,0.14,0.01,0.14,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.75,0.00,6,4,0.67,0.50,0.67,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,208,21,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,21,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,861,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,27,34,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,186,619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,1,0.00,0.00,0.00,0.00,0.03,0.06,0.00,255,14,0.05,0.01,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,138,15,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,15,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,2,0.00,0.00,0.00,0.00,0.08,0.08,0.00,255,12,0.05,0.01,0.05,0.00,0.00,0.00,0.00,0.00,normal 28,tcp,ftp,SF,1495,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,52,12,0.23,0.12,0.02,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,8,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,62,277,0.00,0.00,0.00,0.00,1.00,0.00,0.01,120,200,0.88,0.02,0.88,0.01,0.00,0.00,0.09,0.00,normal 3,tcp,smtp,SF,1649,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,157,0.69,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 13,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,244,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,174,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,9,1.00,1.00,0.00,0.00,0.28,0.12,0.00,255,48,0.19,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,143,0.56,0.02,0.56,0.00,0.01,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,108,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,141,221,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 21,tcp,ftp,SF,249,774,0,0,0,4,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,237,48,0.20,0.03,0.00,0.00,0.01,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,117,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,18,0.00,0.00,0.00,0.00,0.86,0.29,0.11,255,248,0.97,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5336,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,114,101,0.16,0.03,0.16,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,121,201,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,5,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,5,0.02,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,http,SF,185,11380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,0.00,0.50,1.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,338,11868,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,206,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,2512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,255,1.00,0.00,0.02,0.10,0.00,0.00,0.92,0.80,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.16,0.15,0.00,0.00,0.00,0.15,1.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,12884,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,219,219,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1187,411,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,94,124,0.71,0.06,0.01,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,227,498,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 10,tcp,ftp_data,SF,0,5151385,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,5,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,196,255,1.00,0.00,0.01,0.02,0.00,0.00,0.17,0.35,normal 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,17,123,1.00,0.00,1.00,0.44,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,185,7225,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,25,1.00,0.00,0.14,0.08,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,1,0.00,0.00,0.00,0.00,0.08,0.31,0.00,255,1,0.00,0.48,0.67,0.00,0.00,0.00,0.33,0.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,49,49,0.00,0.00,0.00,0.00,1.00,0.00,0.00,121,49,0.40,0.03,0.40,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,286,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,239,546,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,24,0.00,0.00,0.00,0.00,1.00,0.00,0.17,141,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,8075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,135,0.53,0.01,0.53,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,194,4218,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.01,0.33,0.00,0.00,0.00,normal 0,tcp,http,SF,328,2701,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.25,0.17,0.00,0.00,1.00,0.00,0.33,4,255,1.00,0.00,0.25,0.04,0.25,0.00,0.00,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,15,1.00,1.00,0.00,0.00,0.10,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,9,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,13,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,333,1384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,16,0.00,0.00,0.00,0.00,1.00,0.00,0.00,164,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,14,0.00,0.00,1.00,1.00,0.08,0.08,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,auth,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,9,0.00,0.00,1.00,1.00,0.03,0.06,0.00,255,9,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,240,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,16,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,45,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,196,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,7,1.00,1.00,0.00,0.00,1.00,0.00,0.00,129,69,0.53,0.02,0.01,0.00,0.98,0.97,0.00,0.00,anomaly 0,tcp,http,SF,417,7339,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,1,0.00,0.00,0.00,0.00,0.14,0.29,0.00,221,176,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,6,1.00,1.00,0.00,0.00,0.21,0.14,0.00,255,22,0.09,0.05,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,73,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,71,149,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,211,0.83,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,303,622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,39,39,0.00,0.00,0.00,0.00,1.00,0.00,0.00,114,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,31,1.00,0.45,0.00,0.00,0.06,0.06,0.06,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,257,125015,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,179,255,1.00,0.00,0.01,0.02,0.01,0.01,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,4,1.00,1.00,0.00,0.00,0.33,0.25,0.00,255,10,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,357,2547,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,328,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.67,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,73,153,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,19,1.00,1.00,0.00,0.00,0.13,0.05,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,271,10615,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.01,normal 10,tcp,finger,SF,6,139,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,111,7,0.03,0.03,0.01,0.29,0.00,0.00,0.00,0.00,normal 2,tcp,smtp,SF,798,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,156,0.71,0.29,0.14,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,ssh,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,126,16,0.00,0.00,1.00,1.00,0.13,0.07,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,time,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,173,10,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,10,0.04,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,20,1.00,1.00,0.00,0.00,0.11,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,696,363,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,39,174,0.97,0.05,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,349,2578,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,1.00,1.00,0.00,0.00,0.20,0.60,0.00,255,17,0.07,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,2842,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,18,0.25,0.06,0.00,0.00,1.00,0.00,0.11,4,255,1.00,0.00,0.25,0.01,0.25,0.00,0.00,0.00,normal 2,tcp,smtp,SF,1544,479,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,126,44,0.14,0.04,0.01,0.05,0.00,0.00,0.79,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,70,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,70,0.27,0.01,0.27,0.00,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,104,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.02,0.01,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,3,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,3,0.01,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 23,tcp,ftp,SF,287,892,0,0,0,5,0,1,0,0,0,0,0,0,0,0,0,1,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,138,26,0.19,0.09,0.01,0.00,0.02,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,223,20,0.09,0.05,0.09,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,5,0.00,0.00,1.00,1.00,0.03,0.07,0.00,255,5,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,6,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,27,0.11,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,7,1.00,1.00,0.00,0.00,0.06,0.07,0.00,112,7,0.06,0.09,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,236,13503,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,12,255,1.00,0.00,0.08,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,efs,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,8,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,25,1.00,1.00,0.00,0.00,0.17,0.06,0.00,255,25,0.10,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,180,180,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,180,0.71,0.01,0.71,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,18,0.00,0.00,1.00,1.00,0.15,0.07,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,14,1.00,1.00,0.00,0.00,0.19,0.05,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,187,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,172,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,189,35,0.12,0.04,0.12,0.06,0.01,0.00,0.01,0.00,normal 0,tcp,http,SF,198,1643,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,240,397,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,6,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,29,0.11,0.05,0.11,0.00,0.31,0.00,0.02,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,52,0.00,0.00,0.00,0.00,1.00,0.00,0.00,170,76,0.45,0.04,0.45,0.00,0.01,0.00,0.37,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,274,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,214,16564,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,194,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,17,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,131,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,151,231,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,158,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,313,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,156,253,1.00,0.00,0.01,0.06,0.00,0.00,0.45,0.66,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,174,3,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,19,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,42,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,17,1.00,0.00,1.00,0.12,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.50,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,telnet,S1,5173,7962,0,0,0,0,0,1,0,0,0,0,11,0,1,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,88,9,0.10,0.06,0.01,0.00,0.02,0.22,0.00,0.00,normal 2,tcp,smtp,SF,1464,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,189,0.64,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,227,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,33,33,0.00,0.00,0.00,0.00,1.00,0.00,0.00,33,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,378,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.11,0.00,0.89,1.00,anomaly 0,udp,domain_u,SF,44,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,55,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,211,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,83,9,0.00,0.00,1.00,1.00,0.11,0.07,0.00,255,22,0.09,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,smtp,SF,1249,303,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,247,64,0.25,0.29,0.00,0.03,0.00,0.00,0.26,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.09,0.00,255,3,0.01,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,737,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,192,163,0.62,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,458,1,0.08,0.00,0.92,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.06,0.00,0.94,1.00,anomaly 0,tcp,http,SF,225,2599,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,7,0.00,0.14,0.00,0.00,1.00,0.00,0.57,111,255,1.00,0.00,0.01,0.02,0.00,0.01,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,508,1,0.09,0.00,0.90,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.07,0.00,0.93,1.00,anomaly 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,54,3,0.00,0.00,0.00,0.00,0.06,0.11,0.00,255,3,0.01,0.09,0.31,0.00,0.00,0.00,0.61,0.00,anomaly 0,tcp,http,SF,288,1376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,1,1.00,1.00,0.00,0.00,0.05,0.10,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,1080,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,53,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,1263,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,64,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,15,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,343,12777,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,82,239,1.00,0.00,0.01,0.03,0.01,0.00,0.00,0.00,normal 0,tcp,http,SF,218,20131,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.01,normal 8,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 1398,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.84,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,35147,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,268,2974,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,42,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,77,292,0.00,0.00,0.00,0.00,1.00,0.00,0.01,135,200,0.89,0.01,0.89,0.01,0.00,0.00,0.08,0.00,normal 0,tcp,smtp,SF,1396,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,198,242,0.96,0.01,0.01,0.01,0.00,0.00,0.00,0.00,normal 31301,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.82,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,205,2,0.01,0.05,0.01,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,220,16,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,16,0.06,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,257,8,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,316,1284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,47,0.00,0.00,0.00,0.00,1.00,0.00,0.04,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,13,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,296,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,11,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,157,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,134,17,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,link,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,5,1.00,1.00,0.00,0.00,0.03,0.05,0.00,255,5,0.02,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,10,0.00,0.00,0.00,0.00,0.32,0.10,0.00,255,10,0.04,0.87,0.15,0.00,0.10,0.00,0.76,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,2,0.20,1.00,0.20,1.00,0.00,0.00,0.60,1.00,anomaly 0,udp,domain_u,SF,42,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,125,125,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,20,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,315,5323,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,47,255,1.00,0.00,0.02,0.04,0.02,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,8,85,1.00,0.00,0.12,0.21,0.00,0.01,1.00,0.84,normal 0,tcp,http,SF,326,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,626,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,241,2631,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 15,tcp,smtp,SF,12715,1459,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,67,129,0.55,0.06,0.01,0.02,0.00,0.12,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,199,199,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,249,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,332,254,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,11,255,1.00,0.00,0.09,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,74,1,0.01,0.00,0.92,1.00,0.01,1.00,0.00,255,1,0.00,0.32,0.00,0.00,0.00,0.00,0.27,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,19,1.00,1.00,0.00,0.00,0.16,0.06,0.00,255,30,0.12,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,84,131,1.00,0.00,1.00,0.19,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,252,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,17,255,1.00,0.00,0.06,0.04,0.06,0.01,0.00,0.00,normal 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,2,0.75,1.00,0.25,0.00,0.17,0.50,0.00,255,2,0.01,0.03,0.05,0.00,0.04,1.00,0.01,0.00,anomaly 0,tcp,http,SF,214,21815,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,31,255,1.00,0.00,0.03,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,232,347,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,42,0.00,0.00,0.00,0.00,1.00,0.00,0.10,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,23,1.00,1.00,0.00,0.00,0.08,0.04,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,203,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,148,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,237,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,16,1.00,1.00,0.00,0.00,0.12,0.05,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,96,12,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,20,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,SF,1210,2447,0,0,0,28,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,44,0.17,0.02,0.00,0.00,0.05,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,225,2445,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,19,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,11,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,176,144,0.82,0.03,0.01,0.00,0.00,0.00,0.82,1.00,normal 0,udp,domain_u,SF,45,135,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,170,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,234,1580,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,217,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,146,5,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,1,0.00,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,7,1.00,1.00,0.00,0.00,0.39,0.33,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,SF,10272,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,11,1,0.09,0.00,0.00,0.00,0.09,0.45,0.00,59,1,0.02,0.15,0.69,0.00,0.02,0.00,0.00,0.00,normal 0,udp,domain_u,SF,34,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,60,6,0.05,0.10,0.05,0.33,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,7,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,9,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,61,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,128,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,150,0.00,0.00,0.00,0.00,0.99,0.03,0.01,255,236,0.93,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,2019,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,25,25,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,237,23,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,15722,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,30,0.12,0.05,0.12,0.00,0.48,0.00,0.02,0.00,normal 0,tcp,http,SF,324,3461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,101,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,1651,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 7,tcp,smtp,SF,1804,364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,254,206,0.81,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,159,8391,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,212,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,0,1587,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0.12,0.12,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,253,1001,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.00,0.00,normal 0,tcp,http,SF,333,406,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,42,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,273,23,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,339,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,249,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,220,1158,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,171,3070,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,11,0.00,0.00,0.00,0.00,1.00,0.00,0.45,13,136,1.00,0.00,0.08,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,8,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,1722,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.32,0.25,0.00,0.27,0.00,0.26,1.00,anomaly 0,tcp,http,SF,232,12922,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,18,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,18,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,127,11,1.00,1.00,0.00,0.00,0.09,0.08,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,urp_i,SF,123,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.33,0.00,204,31,0.15,0.01,0.15,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,1075,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,252,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,122,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,1.00,0.67,1.00,0.00,0.67,12,255,1.00,0.00,0.08,0.22,0.00,0.00,1.00,1.00,normal 0,tcp,http,SF,235,466,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,19,255,1.00,0.00,0.05,0.03,0.05,0.02,0.16,0.02,normal 4,tcp,smtp,SF,1895,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,90,195,0.64,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,315,599,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,202,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,250,2577,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,169,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,finger,SF,9,140,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,6,0.05,0.15,0.05,0.33,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1987,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,105,29,0.28,0.68,0.01,0.00,0.00,0.00,0.62,0.00,normal 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,10,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,10,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,14,1.00,1.00,0.00,0.00,0.05,0.05,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,9,1.00,1.00,0.00,0.00,0.90,0.20,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,222,1719,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,216,1735,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,93,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,5,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,44,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,223,0.00,0.00,0.00,0.00,0.99,0.01,0.01,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,232,12,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,uucp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,13,0.00,0.00,1.00,1.00,0.12,0.07,0.00,255,13,0.05,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,46,46,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,116,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,677,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,214,1319,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,516,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,408,408,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,6463,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,2,0.00,0.00,0.00,0.00,0.11,0.22,0.00,255,2,0.01,0.16,0.46,0.00,0.00,0.00,0.47,0.00,anomaly 0,tcp,http,SF,296,301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,52,255,1.00,0.00,0.02,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,245,0.96,0.01,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,udp,domain_u,SF,45,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,211,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,97,0.71,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,1497,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,2,255,1.00,0.00,0.50,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,147,9,0.00,0.00,1.00,1.00,0.06,0.05,0.00,255,9,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,92,16,1.00,1.00,0.00,0.00,0.17,0.05,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,301,587,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,40,40,0.00,0.00,0.00,0.00,1.00,0.00,0.00,40,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,81,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,1.00,1.00,1.00,0.00,1.00,2,255,1.00,0.00,0.50,0.09,0.00,0.00,1.00,0.87,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,52,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,32,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,59,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,175,0.69,0.02,0.69,0.00,0.00,0.00,0.24,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,15,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,138,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,76,123,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,5,1.00,1.00,0.00,0.00,0.08,0.09,0.00,255,14,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,33,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,99,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,1,255,1.00,0.00,1.00,0.03,1.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,12640,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,84,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,284,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,124,250,1.00,0.00,0.01,0.09,0.00,0.00,0.23,0.37,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,5,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,23,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,63,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,44,71,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,131,131,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,235,6225,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,13,0.00,0.15,0.00,0.00,1.00,0.00,0.23,63,255,1.00,0.00,0.02,0.11,0.00,0.00,0.79,0.68,normal 0,tcp,http,SF,168,4188,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,43,255,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,80,0.31,0.02,0.31,0.00,0.02,0.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.96,0.95,0.00,0.00,0.00,0.95,1.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.05,0.00,0.95,1.00,0.00,0.96,0.00,255,1,0.00,0.96,0.00,0.00,0.03,0.00,0.97,1.00,anomaly 0,tcp,http,SF,340,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,97,0.38,0.02,0.38,0.00,0.04,0.00,0.02,0.00,anomaly 0,tcp,http,SF,316,1092,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,Z39_50,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,184,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,114,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,0.50,1.00,1.00,250,228,0.91,0.01,0.00,0.00,0.00,0.00,0.02,0.00,normal 4374,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,2,0.00,0.00,0.00,0.00,0.33,0.50,0.00,255,2,0.01,0.44,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,2431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,187,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,18,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,26408,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,23,109,0.65,0.13,0.65,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,http,S1,295,8227,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,34,255,1.00,0.00,0.03,0.01,0.03,0.00,0.00,0.00,normal 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.25,0.25,1.00,0.00,0.00,138,255,1.00,0.00,0.01,0.01,0.00,0.00,0.01,0.00,normal 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,61,61,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,SH,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,56,1,0.02,0.82,0.86,0.00,0.86,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,11,1.00,1.00,0.00,0.00,0.11,0.06,0.00,255,11,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,148,148,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,188,0.74,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,163,9,0.86,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,2014,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,22,0.00,0.00,0.00,0.00,1.00,0.00,0.18,25,143,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,22,1.00,0.00,1.00,0.14,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,294,885,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,16,0.00,0.00,0.07,0.06,1.00,0.00,0.19,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,ftp_data,SF,373,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,42,87,0.40,0.10,0.40,0.02,0.00,0.00,0.02,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,150,150,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,150,0.59,0.01,0.59,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,254,4845,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,102,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,74,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,259,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 30057,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.62,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,231,30262,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,105,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,117,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1774,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.69,0.98,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,103,20,1.00,1.00,0.00,0.00,0.19,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,334,1394,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,244,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,330,7609,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,kshell,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,20,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,88,88,1.00,0.00,0.01,0.00,0.01,0.01,0.01,0.01,anomaly 0,udp,domain_u,SF,43,43,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,45,45,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,80,0.50,1.00,0.50,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,smtp,SF,935,336,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,96,59,0.61,0.05,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,81,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,1,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,15,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,122,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,111,0.00,0.00,0.00,0.00,0.99,0.02,0.02,255,253,0.99,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,323,1929,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,30,30,0.00,0.00,0.00,0.00,1.00,0.00,0.00,152,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,182,10,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,10,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,16,48,0.94,0.12,1.00,0.10,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,16,1.00,1.00,0.00,0.00,0.24,0.06,0.00,255,68,0.27,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,200,14512,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,23,255,1.00,0.00,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,53,1.00,0.00,1.00,0.51,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,491,1,0.08,0.00,0.89,1.00,0.00,0.95,0.00,255,1,0.00,0.91,0.00,0.00,0.09,0.00,0.91,1.00,anomaly 0,tcp,http,SF,314,868,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,16,227,1.00,0.00,0.06,0.14,0.00,0.00,1.00,0.82,normal 0,tcp,http,SF,195,1946,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,28,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,210,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,16,0.06,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,49,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,135,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,318,1342,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,1,1.00,1.00,0.00,0.00,0.00,0.05,0.00,255,1,0.00,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 2,tcp,smtp,SF,643,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,161,131,0.67,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,245,22925,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,11,0.00,0.00,0.00,0.00,1.00,0.00,0.18,31,255,1.00,0.00,0.03,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,netbios_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,7,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,48,55,0.54,0.04,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,159,9275,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,54,255,1.00,0.00,0.02,0.04,0.00,0.01,0.02,0.00,normal 4576,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.47,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,14,1.00,1.00,0.00,0.00,0.93,0.13,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,284,12,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,12,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,11,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,11,0.04,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,908,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,16,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,186,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,207,2429,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.16,0.00,0.00,0.00,0.60,normal 0,tcp,http,SF,238,281,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,1,0.00,0.00,0.94,1.00,0.01,1.00,0.00,203,11,0.03,0.43,0.00,0.18,0.00,0.09,0.37,0.09,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,5,1.00,1.00,0.00,0.00,0.28,0.22,0.00,255,65,0.25,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,239,1,0.00,0.00,1.00,1.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,12,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,216,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,501760,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,196,42,0.21,0.02,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,308,307,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,101,0.40,0.61,0.40,0.00,0.09,0.00,0.52,0.00,anomaly 0,tcp,http,SF,298,760,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,132,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,46,126,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,210,343,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,17,0.00,0.00,0.00,0.00,1.00,0.00,0.18,8,255,1.00,0.00,0.12,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,350,633,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,192,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S1,2107,12642,0,0,0,0,0,1,1,0,0,0,8,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,109,24,0.21,0.04,0.01,0.08,0.17,0.79,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.16,0.00,0.00,1.00,0.90,normal 0,tcp,http,SF,246,1721,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,11,0.00,0.00,0.00,0.00,1.00,0.00,0.27,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,266,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,203,0.80,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,198,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,46,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,259,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 12993,tcp,other,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.68,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,daytime,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,300,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,2,1.00,1.00,0.00,0.00,0.25,0.38,0.00,255,11,0.04,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,208,208,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,48,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,20,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,2,0.00,0.00,0.00,0.00,0.14,0.64,0.00,255,2,0.01,0.64,0.49,0.00,0.00,0.00,0.51,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.10,0.00,0.89,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.13,0.00,0.87,1.00,anomaly 0,tcp,http,SF,316,269,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,255,1.00,0.00,0.02,0.10,0.00,0.00,0.75,0.76,normal 0,udp,domain_u,SF,45,75,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,191,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,261,25,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.10,0.00,0.87,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.09,0.00,0.86,1.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,22,11,1.00,1.00,0.00,0.00,0.50,0.09,0.00,255,59,0.23,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,235,3,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 3469,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,2,0.00,0.00,0.00,0.00,0.50,0.50,0.00,255,2,0.01,0.57,0.95,0.00,0.00,0.00,0.00,0.00,normal 22536,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.73,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,58,1.00,0.00,1.00,0.52,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,216,261,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,149,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,709,384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,44,0.17,0.02,0.00,0.00,0.75,0.00,0.00,0.00,normal 0,tcp,http,SF,210,945,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,291,421,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,18,0.00,0.00,0.00,0.00,1.00,0.00,0.22,128,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,322,5280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,37,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,58,0.23,0.02,0.05,0.00,0.62,0.67,0.00,0.00,normal 0,tcp,http,SF,306,526,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,8,255,1.00,0.00,0.12,0.03,0.00,0.00,0.38,0.02,normal 0,tcp,ftp_data,SF,641,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.65,0.04,0.00,0.00,0.00,0.00,0.00,normal 2708,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,3,0.01,0.62,0.95,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1137,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,255,137,0.54,0.06,0.00,0.00,0.02,0.02,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,1,0.07,0.00,0.87,1.00,0.01,0.99,0.00,255,1,0.00,0.75,0.00,0.00,0.05,0.00,0.65,1.00,anomaly 0,tcp,http,SF,307,1992,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,16,0.00,0.00,0.00,0.00,1.00,0.00,0.12,59,157,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,1056,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,195,605,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,3,255,1.00,0.00,0.33,0.07,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,138,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,190,0.75,0.15,0.75,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,2,1.00,1.00,0.00,0.00,0.01,0.08,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 11014,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.84,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,219,375,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,79,255,1.00,0.00,0.01,0.03,0.00,0.01,0.00,0.00,normal 0,tcp,ftp_data,SF,24440,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,109,58,0.53,0.05,0.53,0.00,0.00,0.00,0.02,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,169,167,0.99,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,662,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,10,0.00,0.00,0.00,0.00,1.00,0.00,0.00,30,255,1.00,0.00,0.03,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,458,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,8,255,1.00,0.00,0.12,0.06,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,215,17,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,1699,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,11,0.04,0.06,0.04,0.00,0.84,0.00,0.01,0.00,normal 1,tcp,smtp,SF,2766,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,165,138,0.62,0.04,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,14,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,10647,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,4,7,1.00,0.00,0.25,0.29,0.00,0.29,0.00,0.14,normal 0,udp,domain_u,SF,44,130,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,97,177,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,213,321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,49,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,netstat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,19,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,45,81,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,172,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,231,0.91,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,331,2109,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,62,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,243,1072,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,59,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1072,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,87,145,0.44,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,206,9,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,243,1694,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,26,0.00,0.00,0.00,0.00,1.00,0.00,0.08,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1481,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,185,0.76,0.12,0.04,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,219,1283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,27,0.00,0.00,0.00,0.00,1.00,0.00,0.07,44,255,1.00,0.00,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,4,0.00,0.00,1.00,1.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,251,16,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_dgm,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,277,15,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,finger,SF,9,196,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,155,7,0.05,0.06,0.01,0.00,0.01,0.00,0.00,0.00,anomaly 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,144,18,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,249,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,91,13,1.00,1.00,0.00,0.00,0.14,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,185,7129,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,246,0.96,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,267,3,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,3,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,229,16,1.00,1.00,0.00,0.00,0.07,0.07,0.00,255,20,0.08,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,15,1.00,1.00,0.00,0.00,0.25,0.07,0.00,221,57,0.25,0.02,0.02,0.04,0.99,0.96,0.00,0.00,anomaly 0,tcp,login,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,135,18,1.00,1.00,0.00,0.00,0.13,0.07,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,263,1053,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,123,0.97,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,10,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,10,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,time,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,205,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,4767,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,27,255,1.00,0.00,0.04,0.04,0.04,0.01,0.00,0.01,normal 0,tcp,http,SF,281,2321,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,31,0.00,0.00,0.00,0.00,1.00,0.00,0.16,162,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,120,4,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,239,531,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,203,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,207,2,1.00,1.00,0.00,0.00,0.01,0.07,0.00,255,14,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,183,3402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,66,255,1.00,0.00,0.02,0.03,0.00,0.04,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,5,0.00,0.00,0.00,0.00,0.29,0.12,0.00,255,50,0.20,0.21,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,301,480,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,11,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,10,2,0.10,1.00,0.10,1.00,0.00,0.00,0.70,1.00,anomaly 0,tcp,hostnames,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,133,7,0.00,0.00,1.00,1.00,0.05,0.06,0.00,255,6,0.02,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,21,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,195,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,235,4547,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,12,0.00,0.00,0.00,0.00,1.00,0.00,0.17,228,228,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,178,178,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,324,431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,328,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.02,0.00,0.00,0.00,0.00,normal 15,tcp,smtp,S2,12249,1400,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,1.00,0.50,0.00,0.00,1.00,0.00,1.00,32,154,0.28,0.06,0.03,0.01,0.03,0.01,0.00,0.00,normal 5915,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.62,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,194,11593,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,8,255,1.00,0.00,0.12,0.05,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,247,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,gopher,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,13,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,233,8378,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,45,255,1.00,0.00,0.02,0.08,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,213,12,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nntp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,RSTO,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.50,0.50,1.00,0.00,0.00,2,255,1.00,0.00,1.00,0.01,0.00,0.00,0.50,0.00,normal 0,tcp,systat,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,260,2,0.00,0.00,1.00,1.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,95,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,44,0.17,0.03,0.17,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,34,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,126,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,1.00,1.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,whois,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,12,0.00,0.00,1.00,1.00,0.08,0.06,0.00,255,12,0.05,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,80,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,145,145,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,92,9,0.10,0.08,0.10,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,296,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,223,0.87,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,klogin,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,14,1.00,1.00,0.00,0.00,0.74,0.11,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,70,14,1.00,1.00,0.00,0.00,0.20,0.06,0.00,255,59,0.23,0.02,0.02,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,492,492,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,71,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,66,0.26,0.02,0.02,0.00,0.94,0.91,0.00,0.00,normal 0,udp,domain_u,SF,42,133,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,328,327,0.00,0.00,0.00,0.00,1.00,0.01,0.00,255,239,0.94,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,75,57,0.76,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 17,tcp,smtp,SF,1363,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,136,90,0.59,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,whois,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,211,15,1.00,1.00,0.00,0.00,0.07,0.05,0.00,255,15,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,285,3999,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,3,255,1.00,0.00,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,4,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,uucp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,89,25,1.00,1.00,0.00,0.00,0.28,0.06,0.00,255,25,0.10,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,287,74301,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,114,33,0.29,0.04,0.29,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,22,18,0.82,0.09,0.05,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,1745,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,54,0.00,0.00,0.00,0.00,1.00,0.00,0.09,203,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,17,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,17,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 1,tcp,smtp,SF,1630,376,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,236,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,20,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,19,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,162,142,0.00,0.00,0.00,0.00,0.88,0.02,0.00,255,177,0.69,0.04,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,343,203,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,149,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,236,29148,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,17,0.00,0.00,0.00,0.00,1.00,0.00,0.12,39,255,1.00,0.00,0.03,0.05,0.00,0.01,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,65,4,1.00,1.00,0.00,0.00,0.06,0.09,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,356,779,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,24,25,0.00,0.00,0.00,0.00,1.00,0.00,0.08,104,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,6,1.00,1.00,0.00,0.00,0.05,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252,13,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,9,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,14,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,231,18,0.00,0.00,1.00,1.00,0.08,0.07,0.00,255,18,0.07,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,328,1444,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,41,209,1.00,0.00,0.02,0.11,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,228,2325,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.06,0.01,0.01,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,276,21,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,21,0.08,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,567,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,153,53,0.31,0.05,0.31,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,45,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,126,0.00,0.00,0.00,0.00,1.00,0.00,0.02,255,230,0.90,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 9100,udp,other,SF,145,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,2,0.01,0.78,0.99,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,6,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,299,294,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,13,0.00,0.00,0.00,0.00,1.00,0.00,0.23,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,190,19,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,24,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,24,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,325,7309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,4,255,1.00,0.00,0.25,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ldap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123,23,1.00,1.00,0.00,0.00,0.19,0.05,0.00,255,23,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 9,tcp,telnet,SF,137,1653,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,1,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,188,15,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,5,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,203,1,0.00,0.76,0.76,0.00,0.03,0.00,0.64,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,106,17,0.00,0.00,1.00,1.00,0.16,0.07,0.00,255,15,0.06,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,233,461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,69,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,770,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1865,387,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,20,149,0.40,0.15,0.05,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,1.00,1.00,0.00,0.00,1.00,0.00,0.00,190,142,0.46,0.01,0.01,0.01,0.99,0.62,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,35,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,130,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,207,2412,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,5,255,1.00,0.00,0.20,0.05,0.00,0.00,0.00,0.00,normal 13428,tcp,telnet,SF,10287,16696,0,0,0,0,0,1,1,0,0,0,38,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,12,0.05,0.06,0.00,0.00,0.87,0.00,0.01,0.17,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,363,1596,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.62,0.62,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.01,0.00,0.00,0.62,0.05,normal 0,udp,domain_u,SF,43,70,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,245,245,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,5,0.00,0.00,1.00,1.00,0.04,0.07,0.00,255,2,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,netbios_ssn,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,222,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,32,0.84,0.05,0.03,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,224,919,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,190,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,233,3461,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,122,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,46,78,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,262,263,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,242,0.95,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,2280,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,45,0.00,0.00,0.00,0.02,1.00,0.00,0.13,74,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,183,16,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,5,0.02,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,267,118,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,205,2543,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,32,32,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,44,91,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,157,157,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,225,0.88,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,2191,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,73,0.29,0.02,0.29,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,9,0.04,0.21,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,258,1,1.00,1.00,0.00,0.00,0.00,0.07,0.00,255,1,0.00,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,242,6,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,6,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,231,493,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,10,0.00,0.00,0.00,0.00,1.00,0.00,0.20,88,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,511,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,102,0.40,0.02,0.40,0.00,0.02,0.00,0.02,0.00,anomaly 0,tcp,http,SF,232,431,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,1,145,1.00,0.00,1.00,0.10,0.00,0.01,0.00,0.00,normal 0,tcp,http,SF,295,1674,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,61,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,125,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,130,0.00,0.00,0.00,0.00,0.98,0.04,0.02,255,225,0.88,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,281,11,0.00,0.00,1.00,1.00,0.04,0.06,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,domain_u,SF,44,72,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,166,168,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,229,0.90,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 3,tcp,smtp,SF,2610,324,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,28,248,1.00,0.00,0.04,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,87,16,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,249,9996,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,4,0.00,0.00,0.00,0.00,1.00,0.00,0.75,54,99,1.00,0.00,0.02,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,209,798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5929,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,196,91,0.37,0.03,0.37,0.02,0.01,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,8,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,289,2833,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,38,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,20,1.00,1.00,0.00,0.00,0.08,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.14,0.24,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.44,0.00,0.56,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.35,0.00,0.65,1.00,anomaly 0,icmp,eco_i,SF,30,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,35,90,0.97,0.06,0.97,0.32,0.00,0.00,0.00,0.00,normal 9,tcp,X11,SF,203896,28224,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,27,0.11,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,221,642,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,29,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,201,1384,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,56,255,1.00,0.00,0.02,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,8,1.00,1.00,0.00,0.00,0.08,0.05,0.00,255,8,0.03,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 4530,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.69,0.91,0.00,0.00,0.00,0.00,0.00,normal 38214,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,2,0.01,0.51,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,ecr_i,SF,1480,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,103,19,0.18,0.04,0.18,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,20,0.00,0.00,1.00,1.00,0.09,0.07,0.00,255,20,0.08,0.08,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,csnet_ns,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,265,8,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,46,129,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,155,0.00,0.00,0.00,0.00,1.00,0.00,0.01,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,2901,332,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,4,119,0.75,0.50,0.25,0.02,0.00,0.34,0.00,0.00,normal 0,tcp,ftp_data,SF,2890,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,112,60,0.54,0.03,0.54,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,305,1247,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,19,0.00,0.00,0.00,0.00,1.00,0.00,0.16,188,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1005,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,132,100,0.61,0.04,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,name,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,246,18,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,18,0.07,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,7,0.00,0.00,0.00,0.00,0.64,0.18,0.00,255,7,0.03,0.85,0.16,0.00,0.03,0.00,0.81,0.00,anomaly 0,tcp,exec,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,115,3,1.00,1.00,0.00,0.00,0.03,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,33,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,187,138,0.74,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,gopher,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,13,0.00,0.00,1.00,1.00,0.06,0.06,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,140,18,1.00,1.00,0.00,0.00,0.13,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,14,1.00,1.00,0.00,0.00,0.19,0.07,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,netbios_ssn,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,7,0.00,0.00,1.00,1.00,0.05,0.07,0.00,255,7,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 198,tcp,http,SF,222,259,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,240,0.94,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,152,3,0.99,0.00,0.00,0.00,0.01,0.06,0.67,255,18,0.07,0.09,0.09,0.00,0.77,0.00,0.01,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,128,19,1.00,1.00,0.00,0.00,0.15,0.05,0.00,255,2,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 5,tcp,smtp,SF,1443,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,137,152,0.61,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,46,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,39,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,7,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,341,5663,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,130,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,1299,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,87,141,0.57,0.05,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,285,619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,89,255,1.00,0.00,0.01,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,173,523,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,18,0.00,0.00,0.00,0.00,1.00,0.00,0.17,37,255,1.00,0.00,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,333,1688,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,19,0.00,0.00,0.00,0.00,1.00,0.00,0.21,80,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,27,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,187,1.00,0.00,1.00,0.25,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,177,11,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,11,0.04,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,icmp,eco_i,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,35,1.00,0.00,1.00,1.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,266,5,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,3,0.01,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,245,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,73,49,0.03,0.08,0.03,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,1.00,1.00,1.00,0.00,1.00,192,255,1.00,0.00,0.01,0.06,0.00,0.00,0.38,0.53,normal 0,tcp,http,SF,331,278,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.00,1.00,0.00,0.50,255,232,0.91,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,196,857,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,10,0.33,0.10,0.00,0.00,1.00,0.00,0.20,1,255,1.00,0.00,1.00,0.04,0.00,0.00,0.00,0.00,normal 6214,udp,other,SF,146,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,1,0.00,0.48,0.91,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,204,96,0.33,0.02,0.33,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,other,SF,8325,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,1,0.05,0.00,0.00,0.00,0.05,0.35,0.00,172,1,0.01,0.06,0.31,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,csnet_ns,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,221,16,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,16,0.06,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,14,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,14,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,5319,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,113,40,0.35,0.03,0.35,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,1576,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,12,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.01,0.01,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,7,1.00,1.00,0.00,0.00,0.06,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,209,10733,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,81,255,1.00,0.00,0.01,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,241,1,1.00,1.00,0.00,0.00,0.00,0.06,0.00,255,15,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,1056,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,61,126,0.61,0.08,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,227,8,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,101,2,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,857,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,222,162,0.73,0.02,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,320,852,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,9,255,1.00,0.00,0.11,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,306,389,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,32,0.00,0.00,0.00,0.00,1.00,0.00,0.12,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,249,5691,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,4,255,1.00,0.00,0.25,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,10,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,19,1.00,0.00,1.00,0.26,0.00,0.00,0.00,0.00,anomaly 0,tcp,imap4,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,196,17,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,17,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 1,tcp,smtp,SF,24240,304,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,106,0.42,0.03,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,206,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,33,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,230,22,1.00,1.00,0.00,0.00,0.10,0.05,0.00,255,22,0.09,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,112,9,1.00,1.00,0.00,0.00,0.08,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,220,1608,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,21,0.00,0.00,0.00,0.00,1.00,0.00,0.10,71,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,47,0.00,0.00,0.00,0.00,1.00,0.00,1.00,1,157,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,283,11,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,214,20,1.00,1.00,0.00,0.00,0.09,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,323,3337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,117,255,1.00,0.00,0.01,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,192,1,0.01,0.49,0.49,0.00,0.00,0.00,0.48,1.00,anomaly 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,236,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,17,0.07,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,12241,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,238,81,0.34,0.05,0.38,0.00,0.00,0.01,0.02,0.00,normal 0,tcp,http,SF,192,6874,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,20,20,0.00,0.00,0.00,0.00,1.00,0.00,0.00,246,255,1.00,0.00,0.00,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,202,10762,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,43,48,0.00,0.00,0.00,0.00,1.00,0.00,0.04,43,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,1032,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,217,0.85,0.01,0.85,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,systat,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,137,16,1.00,1.00,0.00,0.00,0.12,0.04,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,124,18,1.00,1.00,0.00,0.00,0.15,0.06,0.00,255,33,0.13,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,200,2,1.00,1.00,0.00,0.00,0.01,0.05,0.00,255,2,0.01,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,329,774,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,22,0.00,0.00,0.00,0.00,1.00,0.00,0.09,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,sunrpc,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,17,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,4,0.02,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,18,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,31,1.00,0.00,1.00,0.16,0.00,0.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,247,17,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,311,2273,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,7,255,1.00,0.00,0.14,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,289,654,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,15,255,1.00,0.00,0.07,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,174,45,0.20,0.04,0.20,0.04,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,43,127,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,255,255,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,251,0.98,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,2,0.00,0.00,0.00,0.00,0.17,0.25,0.00,255,2,0.01,0.25,0.75,0.00,0.00,0.00,0.22,0.00,anomaly 0,tcp,nntp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,298,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,212,4,1.00,1.00,0.00,0.00,0.02,0.07,0.00,255,4,0.02,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,5,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,7,1.00,1.00,0.00,0.00,0.35,0.15,0.00,255,7,0.03,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,echo,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,202,13,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,1564,330,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,127,163,0.53,0.06,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,234,6,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,7,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,380,346,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,14,0.00,0.00,0.00,0.00,1.00,0.00,0.14,22,255,1.00,0.00,0.05,0.02,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,2,0.00,0.00,0.00,0.00,0.20,0.70,0.00,255,2,0.01,0.29,0.94,0.00,0.00,0.00,0.06,0.00,anomaly 0,tcp,http,SF,217,1800,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,21,21,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,1,57,1.00,0.00,1.00,0.09,0.00,0.04,1.00,0.96,normal 0,udp,private,SF,105,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,64,64,1.00,0.00,0.02,0.00,0.00,0.00,0.00,0.00,normal 81,tcp,telnet,RSTO,137,4101,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,48,1,0.02,0.10,0.02,0.00,0.00,0.00,0.02,1.00,normal 0,tcp,imap4,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,254,14,0.00,0.00,1.00,1.00,0.06,0.07,0.00,255,14,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,udp,private,SF,1,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,1,0.00,0.00,0.00,0.00,0.06,0.17,0.00,255,1,0.00,0.74,0.28,0.00,0.16,0.00,0.56,0.00,anomaly 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,271,20,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,306,1380,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,41,0.00,0.00,0.00,0.00,1.00,0.00,0.05,255,226,0.89,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,191,4,1.00,1.00,0.00,0.00,0.02,0.06,0.00,255,13,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,235,1,0.00,0.17,0.29,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,domain,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,279,9,1.00,1.00,0.00,0.00,0.03,0.06,0.00,255,2,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ftp_data,SF,15377,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,22,0.00,0.00,0.00,0.00,1.00,0.00,0.00,108,125,0.77,0.05,0.77,0.02,0.00,0.00,0.00,0.00,normal 0,udp,other,SF,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,1,0.00,0.00,0.00,0.00,0.20,0.60,0.00,255,1,0.00,0.24,0.48,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,77,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,164,163,0.00,0.00,0.00,0.00,0.99,0.01,0.00,255,254,1.00,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,294,297,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,6,0.00,0.00,0.00,0.00,1.00,0.00,0.00,25,255,1.00,0.00,0.04,0.19,0.00,0.00,0.36,0.90,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,170,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,iso_tsap,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,297,11,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,11,0.04,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,20,1.00,1.00,0.00,0.00,0.50,0.05,0.00,255,71,0.28,0.02,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,237,952,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,22,29,0.00,0.00,0.00,0.00,1.00,0.00,0.10,25,255,1.00,0.00,0.04,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,223,2178,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,8,0.00,0.00,0.00,0.00,1.00,0.00,0.38,68,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,458,21937,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,3,255,1.00,0.00,0.33,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,132,16,1.00,1.00,0.00,0.00,0.12,0.06,0.00,255,16,0.06,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 42862,tcp,private,RSTR,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,1.00,1.00,1.00,0.00,0.00,126,2,0.02,0.05,0.05,0.00,0.00,0.00,0.05,1.00,anomaly 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,4,0.00,0.00,0.00,0.25,1.00,0.00,0.50,255,255,1.00,0.00,0.00,0.00,0.01,0.01,0.04,0.04,anomaly 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,295,18,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,18,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,268,4175,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,308,1298,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,39,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 261,udp,other,SF,147,105,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.60,0.93,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,1.00,1.00,0.00,0.00,1.00,0.00,0.00,177,97,0.55,0.01,0.01,0.00,0.99,0.98,0.00,0.00,anomaly 0,tcp,http,SF,241,191,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,41,41,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.02,0.02,normal 0,tcp,smtp,SF,1154,370,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,2,0.00,0.00,0.00,0.00,1.00,0.00,1.00,172,160,0.63,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.05,0.00,0.00,1.00,0.58,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,17,1.00,1.00,0.00,0.00,0.16,0.06,0.00,185,17,0.09,0.10,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,204,182,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,31,32,0.00,0.00,0.00,0.00,1.00,0.00,0.06,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 39,tcp,smtp,SF,1255,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,137,167,0.69,0.03,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,109,20,1.00,1.00,0.00,0.00,0.18,0.06,0.00,255,14,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,42,42,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,242,0.95,0.01,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,231,482,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,11,38,0.00,0.00,0.00,0.00,1.00,0.00,0.18,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,hostnames,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130,6,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,5,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,other,SF,145,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0.00,0.00,0.00,0.00,0.33,0.67,0.00,255,1,0.00,0.73,0.99,0.00,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,859,368,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,135,97,0.72,0.08,0.01,0.00,0.01,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,216,8,1.00,1.00,0.00,0.00,0.04,0.06,0.00,255,13,0.05,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,229,1442,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,150,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,355,2761,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.50,0.50,0.00,0.00,1.00,0.00,0.00,134,255,1.00,0.00,0.01,0.04,0.01,0.00,0.13,0.08,normal 0,tcp,http,SF,249,285,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,14,14,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,1484,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1007,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,50,133,0.34,0.10,0.02,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,1.00,1.00,0.50,1.00,0.00,255,1,0.00,0.69,0.68,0.00,0.00,0.00,0.68,1.00,anomaly 0,tcp,http,SF,277,1993,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,4,0.00,0.00,0.00,0.00,1.00,0.00,0.00,184,255,1.00,0.00,0.01,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,bgp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,259,12,1.00,1.00,0.00,0.00,0.05,0.07,0.00,255,12,0.05,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,1.00,1.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,205,619,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,8,0.00,0.00,0.00,0.00,1.00,0.00,0.25,5,255,1.00,0.00,0.20,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,305,0,0,0,0,0,0,1,0,0,0,2,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,2,0.01,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,798,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,10,255,1.00,0.00,0.10,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,auth,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,203,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,3,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,122,9,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,10,0.04,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 12743,tcp,telnet,SF,4113,51633,0,0,0,0,0,1,4,0,0,4,18,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,72,3,0.03,0.99,0.01,0.67,0.00,0.00,0.96,0.67,anomaly 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,453,453,0.00,0.00,0.00,0.00,1.00,0.00,0.00,249,249,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,226,2630,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,24,255,1.00,0.00,0.04,0.07,0.00,0.00,0.00,0.00,normal 1,tcp,smtp,SF,3559,515,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,128,244,0.95,0.02,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,7,1.00,1.00,0.00,0.00,0.44,0.25,0.00,255,67,0.26,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,smtp,SF,724,334,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,191,87,0.46,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,188,1364,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,5,0.00,0.00,0.00,0.00,1.00,0.00,0.40,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 2,tcp,ftp_data,SF,2194619,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,75,0.55,0.36,0.55,0.03,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,283,170,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,18,18,0.00,0.00,0.00,0.00,1.00,0.00,0.00,50,255,1.00,0.00,0.02,0.04,0.00,0.00,0.00,0.00,normal 0,icmp,ecr_i,SF,520,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,301,301,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,1.00,0.00,0.00,0.00,0.00,0.00,anomaly 6141,tcp,IRC,RSTR,863,8724,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.50,1.00,0.50,1.00,0.00,21,4,0.19,0.14,0.05,0.00,0.00,0.00,0.19,1.00,normal 0,tcp,name,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,149,24,1.00,1.00,0.00,0.00,0.16,0.05,0.00,255,8,0.03,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,efs,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,108,10,1.00,1.00,0.00,0.00,0.09,0.05,0.00,255,10,0.04,0.04,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,59,13,1.00,1.00,0.00,0.00,0.22,0.10,0.00,255,16,0.06,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,252,1562,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,6,0.00,0.00,0.00,0.00,1.00,0.00,0.33,22,255,1.00,0.00,0.05,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1862,331,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,104,164,0.63,0.04,0.01,0.01,0.00,0.00,0.02,0.05,normal 0,tcp,http,SF,203,402,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,23,0.00,0.00,0.00,0.00,1.00,0.00,0.13,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,other,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,233,20,1.00,1.00,0.00,0.00,0.09,0.06,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,136,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,37,2,0.05,0.19,0.03,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http_443,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,296,13,1.00,1.00,0.00,0.00,0.04,0.05,0.00,255,13,0.05,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,206,337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,discard,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,3,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,4,0.02,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 102,tcp,ftp,SF,1466,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,133,33,0.25,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,215,2659,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,54540,8314,0,0,0,2,0,1,1,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,20,20,1.00,0.00,0.05,0.00,0.00,0.00,0.05,0.05,anomaly 0,tcp,supdup,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,110,1,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,1,0.00,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,ldap,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,111,3,0.00,0.00,1.00,1.00,0.03,0.08,0.00,235,3,0.01,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,237,12636,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,2,0.00,0.00,0.00,0.00,1.00,0.00,0.00,2,255,1.00,0.00,0.50,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,SF,1519,335,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,95,0.37,0.02,0.00,0.00,0.00,0.01,0.00,0.00,normal 0,tcp,mtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,223,2,1.00,1.00,0.00,0.00,0.01,0.06,0.00,255,2,0.01,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,219,442,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,7,0.00,0.00,0.00,0.00,1.00,0.00,0.00,11,255,1.00,0.00,0.09,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,1.00,1.00,0.00,0.00,1.00,0.00,0.00,124,64,0.52,0.02,0.01,0.00,0.98,0.97,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,16,1.00,1.00,0.00,0.00,0.25,0.06,0.00,255,61,0.24,0.02,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,326,1063,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,46,13,0.28,0.09,0.02,0.00,0.00,0.00,0.07,0.15,normal 0,tcp,http,SF,223,488,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,13,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,30,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,http,SF,315,283,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,5,5,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,255,1.00,0.00,0.07,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,327,5220,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,65,255,1.00,0.00,0.02,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,317,309,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,107,255,1.00,0.00,0.01,0.02,0.00,0.00,0.01,0.00,normal 0,tcp,ftp_data,SF,3909,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,7,0.00,0.00,0.00,0.00,1.00,0.00,0.29,253,54,0.21,0.01,0.21,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,238,646,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,12,0.00,0.00,0.00,0.00,1.00,0.00,0.25,32,255,1.00,0.00,0.03,0.02,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,296,655,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,52,52,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,287,19,1.00,1.00,0.00,0.00,0.07,0.06,0.00,255,19,0.07,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,90,3,1.00,1.00,0.00,0.00,0.03,0.08,0.00,255,3,0.01,0.08,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,name,RSTR,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,1.00,1.00,1.00,0.00,0.00,255,1,0.00,0.18,0.16,0.00,0.00,0.00,0.16,1.00,anomaly 0,tcp,ftp_data,SF,7422,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,15,0.00,0.00,0.00,0.00,1.00,0.00,0.00,123,29,0.24,0.03,0.24,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,uucp_path,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,280,18,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,18,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,300,1466,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,44,46,0.02,0.02,0.00,0.00,1.00,0.00,0.07,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,139,19,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,16,0.06,0.05,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 28,tcp,ftp,SF,861,2586,0,0,0,18,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,175,28,0.16,0.04,0.01,0.00,0.00,0.00,0.01,0.07,normal 0,icmp,urp_i,SF,183,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0.00,0.00,0.00,0.00,0.50,1.00,0.00,255,19,0.07,0.01,0.09,0.00,0.00,0.00,0.00,0.00,normal 0,udp,domain_u,SF,45,93,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,244,244,0.00,0.00,0.00,0.00,1.00,0.01,0.01,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,8,1.00,1.00,0.00,0.00,0.44,0.22,0.00,255,68,0.27,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 322,tcp,telnet,SF,248,8082,0,0,0,0,0,1,3,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,15,4,0.27,0.20,0.07,0.00,0.07,0.00,0.13,0.50,normal 0,tcp,http,SF,342,327,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,19,0.00,0.00,0.00,0.00,1.00,0.00,0.11,79,255,1.00,0.00,0.01,0.04,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,5891,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,17,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,23,0.09,0.07,0.09,0.00,0.85,0.00,0.00,0.00,normal 0,tcp,ssh,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,228,13,1.00,1.00,0.00,0.00,0.06,0.05,0.00,255,13,0.05,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,307,8792,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,9,0.00,0.00,0.00,0.00,1.00,0.00,0.33,23,96,1.00,0.00,0.04,0.08,0.00,0.00,0.00,0.02,normal 0,tcp,http,SF,253,2365,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,8,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,222,1337,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,13,255,1.00,0.00,0.08,0.03,0.00,0.00,0.00,0.00,normal 27,tcp,ftp,SF,1483,4152,0,0,0,30,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,44,12,0.27,0.11,0.02,0.00,0.02,0.00,0.00,0.00,normal 0,tcp,http,SF,282,312,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,9,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,192,1490,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,0.67,255,254,1.00,0.01,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,28,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,34,33,0.00,0.00,0.03,0.00,0.97,0.06,0.00,255,33,0.13,0.02,0.13,0.00,0.00,0.00,0.67,0.00,anomaly 0,tcp,http,SF,299,392,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,9,18,0.00,0.00,0.00,0.00,1.00,0.00,0.11,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,142,14,1.00,1.00,0.00,0.00,0.10,0.06,0.00,255,8,0.03,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,http,SF,215,293,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,10,30,0.00,0.00,0.00,0.00,1.00,0.00,0.07,79,255,1.00,0.00,0.01,0.01,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,147,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,77,76,0.99,0.03,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,12,1.00,1.00,0.00,0.00,1.00,0.00,0.00,74,136,0.43,0.03,0.01,0.01,0.97,0.24,0.00,0.00,anomaly 0,tcp,http,SF,276,622,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,3,0.00,0.00,0.00,0.00,1.00,0.00,0.00,227,255,1.00,0.00,0.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,2499,2737,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,13,13,0.00,0.00,0.00,0.00,1.00,0.00,0.00,36,255,1.00,0.00,0.03,0.05,0.00,0.00,0.00,0.00,normal 0,tcp,ctf,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,278,20,0.00,0.00,1.00,1.00,0.07,0.06,0.00,255,20,0.08,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,http,SF,193,2408,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,15,20,0.00,0.00,0.00,0.00,1.00,0.00,0.15,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,252,6160,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,3,5,0.00,0.00,0.00,0.00,1.00,0.00,0.60,3,255,1.00,0.00,0.33,0.04,0.00,0.00,0.00,0.00,normal 0,udp,private,SF,105,146,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,97,84,0.87,0.02,0.01,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,smtp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1.00,1.00,0.00,0.00,1.00,0.00,0.00,63,136,0.33,0.03,0.02,0.01,0.97,0.15,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,116,7,1.00,1.00,0.00,0.00,0.06,0.06,0.00,255,28,0.11,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,telnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,52,12,0.98,1.00,0.02,0.00,0.23,0.10,0.00,255,32,0.13,0.05,0.01,0.00,1.00,1.00,0.00,0.00,anomaly 0,udp,domain_u,SF,39,99,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,201,1.00,0.00,1.00,0.01,0.00,0.00,0.00,0.00,normal 0,tcp,ftp,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,143,14,0.00,0.00,1.00,1.00,0.10,0.06,0.00,255,8,0.03,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 10,tcp,telnet,SF,139,2257,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,7,1.00,0.00,1.00,0.86,0.00,0.00,0.00,0.00,normal 0,tcp,ftp_data,SF,748,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,58,27,0.12,0.07,0.12,0.07,0.00,0.00,0.00,0.00,normal 0,tcp,http,SF,293,2486,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,19,19,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,255,1.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,17,1.00,1.00,0.00,0.00,0.94,0.11,0.00,255,17,0.07,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,private,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,209,13,1.00,1.00,0.00,0.00,0.06,0.08,0.00,255,13,0.05,0.09,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,vmnet,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,243,9,1.00,1.00,0.00,0.00,0.04,0.07,0.00,255,20,0.08,0.07,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,icmp,eco_i,SF,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,50,0.00,0.00,0.00,0.00,1.00,0.00,1.00,2,246,1.00,0.00,1.00,0.50,0.00,0.00,0.00,0.00,anomaly 0,tcp,other,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,511,1,0.12,0.00,0.85,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.16,0.00,0.82,1.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,314,1,0.03,0.00,0.95,1.00,0.00,1.00,0.00,255,1,0.00,1.00,0.00,0.00,0.04,0.00,0.96,1.00,anomaly 29,tcp,ftp,SF,329,1063,0,0,0,6,0,1,0,0,0,0,0,0,0,0,0,1,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,255,60,0.24,0.02,0.00,0.00,0.00,0.00,0.03,0.10,normal 1,tcp,smtp,SF,2896,333,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,3,0.00,0.00,0.00,0.00,1.00,0.00,1.00,12,11,0.92,0.17,0.08,0.00,0.00,0.00,0.00,0.00,normal 0,tcp,http,S1,339,14600,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,2,33,0.50,0.03,0.00,0.00,1.00,0.00,0.06,173,255,1.00,0.00,0.01,0.01,0.01,0.00,0.01,0.00,normal 0,tcp,exec,RSTO,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,7,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,7,0.03,0.06,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,ftp_data,SF,334,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,1,39,1.00,0.00,1.00,0.18,0.00,0.00,0.00,0.00,anomaly 0,tcp,private,REJ,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,105,7,0.00,0.00,1.00,1.00,0.07,0.07,0.00,255,13,0.05,0.07,0.00,0.00,0.00,0.00,1.00,1.00,anomaly 0,tcp,nnsp,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,129,18,1.00,1.00,0.00,0.00,0.14,0.06,0.00,255,20,0.08,0.06,0.00,0.00,1.00,1.00,0.00,0.00,anomaly 0,tcp,finger,S0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,38,9,1.00,1.00,0.00,0.00,0.24,0.11,0.00,255,49,0.19,0.03,0.01,0.00,1.00,1.00,0.00,0.00,anomaly